Code injection

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can view home-screen wallpaper by adjusting the brightness of a locked screen. The Samsung ID is SVE-2019-15540 December 2019...

CVE-2019-20540

CVE-2019-20540 affects Samsung mobile devices running N(7.x), O(8.x), and P(9.0) Exynos software. The issue is a buffer over-read in the core touch screen driver that can lead to a possible information leak. Connected sources corroborate the same description; no explicit patch/version details or ...

CVE-2019-20540

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos chipsets software. There is a buffer over-read and possible information leak in the core touch screen driver. The Samsung ID is SVE-2019-14942 November 2019...

CVE-2019-20535

An issue was discovered on Samsung mobile devices with O8.x and P9.0 software. A connection to a new Bluetooth devices can be established from the lock screen. The Samsung ID is SVE-2019-15533 December 2019...

CVE-2019-20534

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can view home-screen wallpaper by adjusting the brightness of a locked screen. The Samsung ID is SVE-2019-15540 December 2019...

CVE-2019-20530

An issue was discovered on Samsung mobile devices with N7.1, O8.x, P9.0, and Q10.0 software. Arbitrary code execution is possible on the lock screen. The Samsung ID is SVE-2019-15266 December 2019...

CVE-2019-20530

CVE-2019-20530 affects Samsung mobile devices running N(7.1), O(8.x), P(9.0) and Q(10.0). The vulnerability enables arbitrary code execution on the lock screen, linked to Samsung identifier SVE-2019-15266. Public sources in the provided set reiterate the description but do not disclose root cause...

CVE-2020-10849

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos7885, Exynos8895, and Exynos9810 chipsets software. The Gatekeeper trustlet allows a brute-force attack on the screen lock password. The Samsung ID is SVE-2019-14575 January 2020...

CVE-2020-10849

Technical details (affected components, root cause, impact, or fixes) are not publicly disclosed in the provided documents. Monitor for updates from official sources as additional details may be published later.

CVE-2020-10834

CVE-2020-10834 affects Samsung mobile devices running P(9.0). The issue allows attackers to view notifications on the lock screen via Routines, tied to Samsung ID SVE-2019-15074. Connected sources (Red Hat, NVD/NVD-linked entries, CNVD, CNVD, EUVD, PRION) confirm the vulnerability description but...

CVE-2020-10834

An issue was discovered on Samsung mobile devices with P9.0 software. Attackers can view notifications on the lock screen via Routines. The Samsung ID is SVE-2019-15074 February 2020...

Memory Corruption Vulnerability in TP300 Text Screen Software

The TP300 Text Screen Software is a screen setup tool for various... A memory corruption vulnerability exists in TP300 Text Screen Software, which can be exploited by an attacker to cause the program to crash by constructing a malformed evp file...

Halvotec Information Services RAQuest Input Validation Error Vulnerability

Halvotec Information Services RAQuest is a suite of automated tax withholding software from Halvotec Information Services, Germany. An input validation error vulnerability exists in the login screen in Halvotec Information Services RAQuest version 10.23.10801.0. An attacker could exploit this...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

Cross site scripting

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

UBUNTU-CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

CVE-2019-19212

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen...

Shanghai Zhenghang Electronic Technology Co., Ltd. 7-inch touch screen programming software has memory corruption vulnerability

Ltd. is a high-tech enterprise dedicated to product design and development, production, sales and service in the field of industrial control. Ltd. 7-inch touch screen programming software memory corruption vulnerability, attackers can use the vulnerability to construct a deformed hmp file can lea...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 Pre-Auth POC c 2020 ZecOps, Inc. - https://ww...

CVE-2020-0052

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no additional execution privileges needed. User interaction is needed for exploitation.Product:...