Archive
7 May 2024
Vulnerabilities first published on this day (UTC), newest first.
69 results · Clear filters · Feed
-
Medium 5.1
Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.71.8 allows lo…
-
Medium 5.5
Improper privilege management vulnerability in Samsung Internet prior to version 25.0.0.41 allows local attackers to by…
-
Medium 4.4
Improper input validation in Samsung Notes prior to version 4.4.15 allows local attackers to delete files with Samsung …
-
Medium 5.5
Improper privilege management vulnerability in Samsung Email prior to version 6.1.91.14 allows local attackers to acces…
-
Medium 5.7
Authentication bypass vulnerability in Setupwizard prior to SMR May-2024 Release 1 allows physical attackers to skip ac…
-
Medium 6.6
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.
-
Medium 5.5
Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to mo…
-
Medium 6.7
Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to e…
-
Medium 6.0
Out-of-bounds write in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrar…
-
Medium 6.0
Use after free vulnerability in SveService prior to SMR May-2024 Release 1 allows local privileged attackers to cause m…
-
Medium 4.0
Improper export of android application components vulnerability in TelephonyUI prior to SMR May-2024 Release 1 allows l…
-
Medium 5.5
Improper access control vulnerability in FactoryCamera prior to SMR May-2024 Release 1 allows local attackers to take p…
-
Medium 4.0
Improper access control vulnerability in setCocktailHostCallbacks of CocktailBarService prior to SMR May-2024 Release 1…
-
Medium 4.0
Improper access control vulnerability in startListening of CocktailBarService prior to SMR May-2024 Release 1 allows lo…
-
Medium 4.3
Improper Authentication vulnerability in Secure Folder prior to SMR May-2024 Release 1 allows physical attackers to acc…
-
Medium 4.4
A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mod…
-
Medium 4.2
Process Explorer before 17.04 allows attackers to make it functionally unavailable (a denial of service for analysis) b…
-
Medium 5.2
An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client sub…
-
Medium 6.5
Neo4j Cypher component mishandles IMMUTABLE privileges
The Cypher component in Neo4j 5.0.0 through 5.18 mishandles IMMUTABLE privileges in some situations where an attacker already has admin access.
-
Medium 5.3
J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocated…
-
Medium 6.1
An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the "Interesting …
-
Medium 6.3
Roothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
-
Medium 6.5
MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::SilentMultiPprfReceiver::…
-
Medium 5.3
An issue was discovered in Logpoint before 7.4.0. An attacker can enumerate a valid list of usernames by observing the …
-
Medium 4.1
MS Basic Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in the search function in Maven net.mingsoft MS Basic 2.1.13.4 and earlier.
-
Medium 5.3
An issue was discovered in Logpoint before 7.4.0. A path injection vulnerability is seen while adding a CSV enrichment …
-
Medium 6.5
An issue was discovered in Logpoint before 7.4.0. It allows Local File Inclusion (LFI) when an arbitrary File Path is u…
-
Medium 6.5
MP-SPDZ v0.3.8 was discovered to contain a segmentation violation via the function osuCrypto::copyOut at /Tools/SilentP…
-
Medium 4.3CVE-2024-32369 Public exploit
SQL Injection vulnerability in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to o…