Information Disclosure

magento/community-edition is vulnerable to information disclosure. The vulnerability exists as an admin is able to view metadata of a trusted device that is used by another admin...

Vulnerability to bypass two-factor authentication with unverified JWT trusted device token

Before version 3.7 the bundle is vulnerable to a security issue in JWT, which can be exploited by an attacker to generate trusted device cookies on their own, effectively by-passing two-factor authentication. Please either disable the trusted feature in your application or upgrade to a bundle...

Vulnerability to bypass two-factor authentication with unverified JWT trusted device token

Before version 3.7 the bundle is vulnerable to a security issue in JWT, which can be exploited by an attacker to generate trusted device cookies on their own, effectively by-passing two-factor authentication. Please either disable the trusted feature in your application or upgrade to a bundle...

Samsung Smart TV Wi-Fi Direct Elevation of Privilege Vulnerability

Samsung SmartTV is a smart TV from Samsung South Korea that integrates web content, Apps apps, AllShare content, search function and traditional TV channel listings into one user interface. An elevation of privilege vulnerability exists in Samsung Smart TV Wi-Fi Direct, which allows an attacker t...

Android elevation of privilege vulnerability (CNVD-2016-04681)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Bluetooth is a component. A power lifting vulnerability exists in Android's Bluetooth. A local attacker can exploit this vulnerability to add an authorized Bluetooth devi...