2023

Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass auth

Improper authorization verification vulnerability in Samsung Email prior to version 6.1.90.4 allows attackers to read sa

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 i

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version

Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5

Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior

Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior

Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prio

Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account pr

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13

Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.

Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows att

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access u

Improper access control vulnerability in Samsung Account prior to version 14.5.01.1 allows attackers to access sensitive

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows loc

An improper input validation in saped_rec_silence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to

An improper input validation in get_head_crc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause

An improper input validation in saped_dec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause ou

Out-of-bounds Write in read_block of vold prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary cod

Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to rea

Improper Input Validation with USB Gadget Interface prior to SMR Nov-2023 Release 1 allows a physical attacker to execut

Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the netw

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass r

Improper access control vulnerability in SecSettings prior to SMR Nov-2023 Release 1 allows attackers to enable Wi-Fi an

Out-of-bound write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to execute arbitra

Improper Input Validation vulnerability in ProcessNvBuffering of libsec-ril prior to SMR Nov-2023 Release 1 allows local

Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local a

Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the databas

Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via

Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to exe

A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note:

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqui

A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acqui

A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ON

UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a usernam

Memory corruption in Audio when SSR event is triggered after music playback is stopped.

Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.

Memory corruption in Audio while processing the VOC packet data from ADSP.

Transient DOS in WLAN Firmware when firmware receives beacon including T2LM IE.

Memory Corruption in Audio while invoking callback function in driver from ADSP.

Transient DOS in WLAN Firmware while parsing t2lm buffers.

Transient DOS in WLAN Firmware while parsing no-inherit IES.

Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute.

Memory corruption in Automotive Audio while copying data from ADSP shared buffer to the VOC packet data buffer.

Memory corruption in core services when Diag handler receives a command to configure event listeners.

Memory corruption in WLAN HOST while processing the WLAN scan descriptor list.

Memory corruption while processing audio effects.

Information disclosure in WLAN HAL while handling command through WMI interfaces.

Information disclosure in WLAN HAL when reception status handler is called.