Archive
January 2022
Vulnerabilities first published in this month (UTC), newest first.
2,026 results · Feed
-
Unscored —
There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this …
-
Unscored —
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in…
-
Unscored —
There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this v…
-
Unscored —
There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnera…
-
Unscored —
There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitati…
-
Unscored —
There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vuln…
-
Unscored —
Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may …
-
Unscored —
The distributed data service component has a vulnerability in data access control. Successful exploitation of this vuln…
-
Unscored —
The cellular module has a vulnerability in permission management. Successful exploitation of this vulnerability may aff…
-
Unscored —
HwPCAssistant has a path traversal vulnerability. Successful exploitation of this vulnerability may affect data confide…
-
Unscored —
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result…
-
Unscored —
The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result…
-
Unscored —
The CaasKit module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the MeeT…
-
Unscored —
There is a Cross-Site Scripting(XSS) vulnerability in HUAWEI WS318n product when processing network settings. Due to in…
-
Medium 5.3
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive info…
-
Low 3.9
Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox.
-
High 7.5
Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.
-
Medium 4.4
A vulnerability using PendingIntent in Bixby Routines prior to version 3.1.21.8 in Android R(11.0) and 2.6.30.5 in Andr…
-
Medium 4.4
A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Andro…
-
Medium 5.7
Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode pas…
-
Low 2.8
Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Healt…
-
Medium 5.5
A missing input validation before memory copy in TIMA trustlet prior to SMR Jan-2022 Release 1 allows attackers to copy…
-
Medium 4.4
An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications t…
-
Medium 4.0
Keeping sensitive data in unprotected BluetoothSettingsProvider prior to SMR Jan-2022 Release 1 allows untrusted applic…
-
Medium 4.0
Improper authorization in TelephonyManager prior to SMR Jan-2022 Release 1 allows attackers to get IMSI without READ_PR…
-
Medium 4.0
Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to ge…
-
Medium 6.1
Incorrect implementation of Knox Guard prior to SMR Jan-2022 Release 1 allows physically proximate attackers to tempora…
-
High 7.7
Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read an…
-
Medium 4.0
Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arb…
-
Medium 4.0
(Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan…
-
Medium 5.0CVE-2022-22265 Exploited
An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary …
KEV Sep 18, 2023 -
High 7.4
The FANUC R-30iA and R-30iB series controllers are vulnerable to an out-of-bounds write, which may allow an attacker to…
-
High 7.5
The FANUC R-30iA and R-30iB series controllers are vulnerable to integer coercion errors, which cause the device to cra…
-
Unscored —
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRet…
-
Unscored —
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::visitRet…
-
Unscored —
A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL.
-
Unscored —
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::Tuple::validate.
-
Unscored —
A Stack Overflow vulnerability exists in Binaryen 103 via the printf_common function.
-
Unscored —
A Denial of Service vulnerability exists in Binaryen 104 due to an assertion abort in wasm::WasmBinaryBuilder::readFunc…
-
Unscored —
PartKeepr versions up to v1.4.0, in the functionality to upload attachments using a URL when creating a part does not v…