1926 matches found
CVE-2022-30716
CVE-2022-30716 concerns the Samsung DisplayToast component on Android. The issue is an unprotected broadcast in sendIntentForToastDumpLog within DisplayToast, which could let untrusted apps access toast message information from the device. The vulnerability enables information disclosure with a n...
Samsung mobile 安全漏洞
Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile DisplayToast is vulnerable to information disclosure. The vulnerability stems from an unprotected broadcast in sendIntentForToastDumpLog in DisplayToast, which could be exploited to allow untrusted applications to access toas...
CVE-2022-29163 Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.6 and 23.0.3, a user can create a link that is not password protected even if the administrator requires links to be password protected. Versions 22.2.6 and 23.0.3 contain a pat...
Nextcloud 安全漏洞
Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server versions prior to 22.2.6, 23.0.3 and prior to 23.0.3, which originates from a user being able to create...
GHSA-6967-9VVV-4CMM Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Jenkins before versions 2.44 and 2.32.2 is vulnerable to an information exposure in the internal API that allows access to item names that should not be visible SECURITY-380. This only affects anonymous users other users legitimately have access that were able to get a list of items via an...
The vulnerability of the RESTEasy software lies in the lack of protection for operational data, which allows attackers to disclose sensitive information that should be protected.
The vulnerability of the RESTEasy software is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...
Secomea GateManager has an unspecified vulnerability (CNVD-2022-38146)
Secomea GateManager is a remote access server product from the Danish company Secomea.A security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from an unprotected alternate channel vulnerability in the debug console. An attacker could use this vulnerability to...
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows a hacker to gain unauthorized access to information.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information...
The vulnerability of the WLAN AutoConfig service in the Microsoft Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the WLAN AutoConfig service in the Microsoft Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2022-25786
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7...
Information disclosure
Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7...
CVE-2022-25786
GateManager exposes an unprotected alternate channel in its debug console that can disclose sensitive information. Affected product: GateManager, all versions prior to 9.7. Root cause: unprotected alternate channel in the debug console. Impact: confidentiality loss of information. Mitigation deta...
Secomea GateManager 安全漏洞
Secomea GateManager is a remote access server product from the Danish company Secomea.A security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from an unprotected alternate channel vulnerability in the debug console. An attacker could use this vulnerability to...
CVE-2022-28789
Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction. The patch adds proper permission for vulnerable activities...
CVE-2022-28789
Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction. The patch adds proper permission for vulnerable activities...
CVE-2022-28789
Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction. The patch adds proper permission for vulnerable activities...
Code injection
Unprotected activities in Voice Note prior to version 21.3.51.11 allows attackers to record voice without user interaction. The patch adds proper permission for vulnerable activities...
Voice Note 安全漏洞
Voice Note is a voice note-taking software from Samsung South Korea. A security vulnerability exists in Voice Note versions prior to 21.3.51.11, which stems from the presence of unprotected activity. An attacker could exploit the vulnerability to record voice without user interaction. This patch...
The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the parameter /opensis/modules/users/Staff.php, Staff TITLE...
CVE-2021-34588
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...