漏洞 - 第310页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-24923

Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2022-24003

Exposure of Sensitive Information vulnerability in Bixby Vision prior to version 3.7.50.6 allows attackers to access internal data of Bixby Vision via unprotected intent.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-24002

Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-24001

Information disclosure vulnerability in Edge Panel prior to Android S(12) allows physical attackers to access screenshot in clipboard via Edge Panel.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-24000

PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via impl ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-23999

PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：12 | 回复：0
CVE漏洞

CVE-2022-23998

Improper access control vulnerability in Camera prior to versions 11.1.02.16 in Android R(11), 10.5.03.77 in Android Q(10) and 9.0.6.68 in Android P(9) allows untrusted applications to take a picture ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：21 | 回复：0
CVE漏洞

CVE-2022-23997

Unprotected component vulnerability in StTheaterModeDurationAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to disable theater mode without a prope ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：28 | 回复：0
CVE漏洞

CVE-2022-23996

Unprotected component vulnerability in StTheaterModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to enable bedtime mode without a proper permission.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：31 | 回复：0
CVE漏洞

CVE-2022-23995

Unprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permiss ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：28 | 回复：0
CVE漏洞

CVE-2022-23994

An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permiss ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：15 | 回复：0
CVE漏洞

CVE-2022-23853

The LSP (Language Server Protocol) plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：14 | 回复：0
CVE漏洞

CVE-2022-23707

An XSS vulnerability was found in Kibana index patterns. Using this vulnerability, an authenticated user with permissions to create index patterns can inject malicious javascript into the index patter ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-23434

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-23433

Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：11 | 回复：0
CVE漏洞

CVE-2022-23432

An improper input validation in SMC_SRPMB_WSM handler of RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：11 | 回复：0
CVE漏洞

CVE-2022-23431

An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：11 | 回复：0
CVE漏洞

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：11 | 回复：0
CVE漏洞

CVE-2022-23428

An improper boundary check in eden_runtime hal service prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：11 | 回复：0
CVE漏洞

CVE-2022-23427

PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-23426

A vulnerability using PendingIntent in DeX Home and DeX for PC prior to SMR Feb-2022 Release 1 allows attackers to access files with system privilege.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-23425

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-22292

Unprotected dynamic receiver in Telecom prior to SMR Feb-2022 Release 1 allows untrusted applications to launch arbitrary activity.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：10 | 回复：0
CVE漏洞

CVE-2022-22291

Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-0562

Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-0561

Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF fi ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-0382

An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2022-0185

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivile ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-4046

The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-4035

A stored cross site scripting have been identified at the comments in the report creation due to an obsolote version of tinymce editor. In order to exploit this vulnerability, the attackers needs an a ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup.……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：9 | 回复：0
CVE漏洞

CVE-2021-39688

In TBD of TBD, there is a possible out of bounds read due to TBD. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exp ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39687

In HandleTransactionIoEvent of actuator_driver.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution pr ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39677

In startVideoStream() there is a possibility of an OOB Read in the heap, when the camera buffer is ‘zero’ in size.Product: AndroidVersions: Android-11Android ID: A-205097028……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39676

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no ad ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39675

In GKI_getbuf of gki_buffer.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39674

In btm_sec_connected and btm_sec_disconnected of btm_sec.cc file , there is a possible use after free. This could lead to local escalation of privilege with User execution privileges needed. User inte ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39672

In fastboot, there is a possible secure boot bypass due to a configuration error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0
CVE漏洞

CVE-2021-39671

In code generated by aidl_const_expressions.cpp, there is a possible out of bounds read due to uninitialized data. This could lead to information disclosure with no additional execution privileges nee ...……

作者：菜鸟教程小白 | 时间：2022-6-23 08:29 | 阅读：8 | 回复：0