CVE-2023-21478

CVE-2023-21478 affects the TIGERF trustlet prior to SMR Apr-2023 Release 1. The vulnerability is due to improper input validation and could allow local attackers to access protected data. Affected component is the TIGERF trustlet; impact is exposure of data to a local attacker. Public exploit det...

CVE-2023-21478

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21477

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

CVE-2023-21477

The CVE-2023-21477 issue affects the TIGERF trustlet in Samsung Mobile devices, where an Access of Memory Location After End of Buffer vulnerability within the trustlet allows a local attacker to access protected data. Affected component: TIGERF trustlet; affected versions: prior to SMR Apr-2023 ...

PT-2025-35670

Name of the Vulnerable Software and Affected Versions: TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description: An improper input validation issue exists in the TIGERF trustlet, potentially allowing local attackers to access protected data. Recommendations: Update to SMR Apr-2023...

CVE-2023-21483: Undefined Security Weakness

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service...

CVE-2023-21478: Undefined Security Weakness

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

PT-2025-35675

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.53.6 Description: An improper access control issue exists in Galaxy Store. A local attacker can access protected data by exploiting an exported service. Recommendations: Update Galaxy Store to version 4.5.53...

CVE-2023-21477: Out-of-bounds Read

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2023 Release 1, which stems from improper input validation and could allo...

PT-2025-35669

Name of the Vulnerable Software and Affected Versions TIGERF trustlet versions prior to SMR Apr-2023 Release 1 Description An Access of Memory Location After End of Buffer issue exists in the TIGERF trustlet. This allows local attackers to access protected data. Recommendations Update to SMR...

The vulnerability of the SAP NetWeaver software integration platform, related to deficiencies in the deserialization mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver software integration platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP (BIC Document) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP BIC Document is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker,...

The vulnerability of the NGINX Proxy Manager, a proxy server for managing hosts, arises from errors in restricting token assignment, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the NGINX Proxy Manager, a proxy server for managing hosts, is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the NFS Export component of the PowerScale OneFS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NFS Export component of the PowerScale OneFS operating system is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the PreventLocalEntityResolver class in the software for administrative and publishing of geodata on the OSGeo GeoServer server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PreventLocalEntityResolver class in the software for administrative and publishing of geodata on the OSGeo GeoServer server is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

The vulnerability of the system call processing function of the software for displaying the characteristics and parameters of hardware devices allows a hacker to compromise the integrity and confidentiality of the protected information.

The vulnerability of the system call processing function of the software for displaying the characteristics and parameters of hardware devices, such as CPU-Z, is related to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity and confidentialit...

The vulnerability of the Dell ThinOS operating system for thin clients involves storing critical information in an open manner, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Dell ThinOS operating system for thin clients involves the storage of critical information in an open manner. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to the protected information...

The vulnerability of the Dell Smart Dock’s software-hardware combination lies in the ability to disclose information through registration files, allowing a perpetrator to expose the protected information.

The vulnerability of the Dell Smart Dock software lies in the ability to disclose information through registration files. Exploiting this vulnerability could allow a perpetrator to…...