Archive
4 March 2021
Vulnerabilities first published on this day (UTC), newest first.
25 results · Clear filters · Feed
-
Medium 5.3
Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to interc…
-
Medium 4.0
Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel p…
-
Medium 6.2
Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to devi…
-
Medium 4.0
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00…
-
Medium 4.0
Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of serv…
-
Medium 4.0
Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial…
-
Medium 5.1
Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically pro…
-
Medium 4.4
Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given…
-
Medium 4.4
Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, giv…
-
Medium 4.4
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted…
KEV Nov 8, 2022 -
Medium 5.5
Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted ap…
-
Medium 5.4
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Medium 5.4
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Medium 5.4
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Medium 5.4
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Medium 5.4
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Medium 6.4
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…
-
Medium 6.4
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…
-
Medium 6.4
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitr…
-
Medium —
[20210308] - Core - Path Traversal within joomla/archive zip class
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.
-
Medium 4.0
When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2…
-
Medium 4.8
Regular Expression Denial of Service (ReDoS)
This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process.
-
Medium 4.1
An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS…
-
Medium 5.9
Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the…
-
Medium 6.1CVE-2020-24912 Scanner template
qcubed reflected cross-site scripting (XSS) vulnerability
A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authenticated users.