CVE-2019-15450

The Samsung j3popeltecan Android device with a build fingerprint of samsung/j3popeltevl/j3popeltecan:8.1.0/M1AJQ/J327WVLS3BSA2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000100, versionName=7.0.1.0 that allows other...

CVE-2019-15444

CVE-2019-15444 affects Samsung S7 on Android 8.0 where a pre-installed app, com.samsung.android.themecenter, exports capabilities that allow other pre-installed apps to perform app installation. The issue stems from the themecenter component, enabling access for apps that can obtain signatureOrSy...

CVE-2019-15443

The CVE-2019-15443 entry concerns Samsung J7 Max running Android 8.1.0 with a pre-installed app (com.samsung.android.themecenter, v7.0.1.0) that can enable other pre-installed apps to perform app installations via an accessible component. The underlying issue is that exported capabilities from th...

CVE-2019-15438

CVE-2019-15438 affects Samsung XCover4 running Android 8.1.0 (build samsung/xcover4ltedo/xcover4lte). A pre-installed app, com.samsung.android.themecenter (v7.0.1.0), exposes a component that lets other pre-installed apps perform app installation. Any pre-installed app with signatureOrSystem perm...

CVE-2019-15436

The Samsung A8+ Android device with a build fingerprint of samsung/jackpot2ltexx/jackpot2lte:8.0.0/R16NW/A730FXXS4BSC2:user/release-keys contains a pre-installed app with a package name of com.samsung.android.themecenter app versionCode=7000000, versionName=7.0.0.0 that allows other pre-installed...

CVE-2017-9381

An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices. The device provides a user with the capability of installing or deleting apps on the device using the web management interface. It seems that the device does not implement any cross-site request forgery protection...

CVE-2018-4176

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Disk Images" component. It allows attackers to trigger an app launch upon mounting a crafted disk image...

CVE-2017-14124

In eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used, it is possible to start applications other than defined, even if the user does not have permissions to change application definitions...

About the security content of watchOS 3.1.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...