12109 matches found
CVE-2022-28791
Improper input validation vulnerability in InstallAgent in Galaxy Store prior to version 4.5.41.8 allows attacker to overwrite files stored in a specific path. The patch adds proper protection to prevent overwrite to existing files...
CVE-2022-28791
CVE-2022-28791 describes an improper input validation vulnerability in Galaxy Store’s InstallAgent prior to version 4.5.41.8 that allows overwriting files in a specific path. A patch adds protection to prevent overwriting existing files. Affected product: Galaxy Store (InstallAgent component); vu...
Samsung Galaxy Store输入验证错误漏洞
Samsung Galaxy Store is an application store by Samsung Mobile Samsung in South Korea. A security vulnerability exists in Galaxy Store versions prior to 4.5.41.8, which stems from an incorrect input validation vulnerability in InstallAgent. An attacker exploited the vulnerability to overwrite fil...
Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-006 (ALASKERNEL-5.4-2022-006)
The version of kernel installed on the remote host is prior to 5.4.141-67.229. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.4-2022-006 advisory. A flaw was found in the Linux kernel. This flaw allows attackers to cause a denial of service soft lockup b...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2022-004)
The version of kernel installed on the remote host is prior to 5.10.59-52.142. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2022-004 advisory. A flaw was found in the Linux kernel, where a BPF program can obtain sensitive information from kernel...
Google Play’s Data safety section empowers Android users to make informed app choices
Google has launched its new "nutrition labels" for apps, a feature it promised in the spring of 2021. This release came days after the Chrome team released badges for the Chrome Web Store for browser extensions. The company said in a blog post that its rolling out the labels—which it calls the...
Microweber Cross-Site Scripting Vulnerability
Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. A cross-site scripting vulnerability exists in Microweber, which stems from the program's lack of checksum filtering of...
Xiaomi Mi App Store Open Redirect Vulnerability
A security vulnerability exists in Xiaomi Mi App Store, an app store of Xiaomi, a Chinese company. The vulnerability is due to the Xiaomi App Store not verifying the validity of incoming data, which could be exploited by an attacker to cause the app store to automatically download and install app...
newlove.ukraine-goods4.store Cross Site Scripting vulnerability OBB-2557335
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-1457
Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the...
CVE-2022-1457 Store XSS in title parameter executing at EditUser Page & EditProducto page in neorazorx/facturascripts
Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the...
CVE-2020-14121
A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation...
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
CVE-2020-14121
A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation...
Code injection
A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation...
Information disclosure
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
CVE-2020-14118
An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming data, can cause the app store to automatically download and install apps...
CVE-2020-14118
CVE-2020-14118 affects the Xiaomi Mi App Store. The issue is an intent redirection vulnerability caused by the app store not verifying incoming data, which can cause automatic download/installation of apps. Documents confirm the root cause and impact (open redirect-like behavior) but do not provi...
CVE-2020-14121
A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation...