Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25324 State: PUBLISHED Published: 2021-01-19T15:30:20 Last Updated: 2024-08-03T20:03:05.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/741243f707cac7de1a3769a38e03004f037f4a3d
CVE ID: CVE-2021-25325 State: PUBLISHED Published: 2021-01-19T15:29:58 Last Updated: 2024-08-03T20:03:05.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/MISP/MISP/commit/829c3199ba3afdecb52e0719509f3df4463be5b4
CVE ID: CVE-2021-25326 State: PUBLISHED Published: 2021-04-09T12:19:22 Last Updated: 2024-08-03T20:03:05.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_version.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed. Additional Analyst Notes: - CVE Program Container: References: - https://s3curityb3ast.github.io/KSA-Dev-013.md - http://seclists.org/fulldisclosure/2021/May/8 - http://packetstormsecurity.com/files/162455/Shenzhen-Skyworth-RN510-Information-Disclosure.html
CVE ID: CVE-2021-25327 State: PUBLISHED Published: 2021-04-09T12:19:27 Last Updated: 2024-08-03T20:03:05.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://s3curityb3ast.github.io/KSA-Dev-012.md - http://seclists.org/fulldisclosure/2021/May/6 - http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-
.org/fulldisclosure/2021/May/6 - http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2021-25328 State: PUBLISHED Published: 2021-04-09T12:19:32 Last Updated: 2024-08-03T20:03:05.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service (DoS) or possible code execution on the device. Additional Analyst Notes: - CVE Program Container: References: - https://s3curityb3ast.github.io/KSA-Dev-011.md - http://seclists.org/fulldisclosure/2021/May/5 - http://packetstormsecurity.com/files/162450/Shenzhen-Skyworth-RN510-Buffer-Ov
//seclists.org/fulldisclosure/2021/May/5 - http://packetstormsecurity.com/files/162450/Shenzhen-Skyworth-RN510-Buffer-Overflow.html
CVE ID: CVE-2021-25329 State: PUBLISHED Published: 2021-03-01T12:00:20.000Z Last Updated: 2025-02-13T16:27:48.719Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: Remote code execution via session persistence Description: The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue. Additional Analyst Not
VE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E - https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org
tml/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/03/01/2 - https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html - https://www.debian.org/security/2021/dsa-4891 - https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb51
fc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r732b2ca289dc02df2de820e8775559abd6c207f159e39f559547a085%40%3Cusers.tomcat.apache.org%3E - https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E - https://www.oracle.com//security-alerts/cpujul2021.html - https://security.netapp.com/advisory/ntap-20210409-0002/ - https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - htt
- https://www.oracle.com/security-alerts/cpuoct2021.html - https://www.oracle.com/security-alerts/cpujan2022.html - https://security.gentoo.org/glsa/202208-34
CVE ID: CVE-2021-25330 State: PUBLISHED Published: 2021-03-02T17:21:16 Last Updated: 2024-08-03T20:03:05.539Z Vendors: n/a Products: Samsung Mobile Devices Problem Types: Improper Control of Generation of Code ('Code Injection') Description: Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25331 State: PUBLISHED Published: 2021-03-04T20:55:20 Last Updated: 2024-08-03T20:03:05.239Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Mini Problem Types: CWE-200 Description: Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25332 State: PUBLISHED Published: 2021-03-04T20:55:45 Last Updated: 2024-08-03T20:03:05.299Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Mini Problem Types: CWE-200 Description: Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25333 State: PUBLISHED Published: 2021-03-04T20:56:17 Last Updated: 2024-08-03T20:03:05.643Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Mini Problem Types: CWE-200 Description: Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25334 State: PUBLISHED Published: 2021-03-04T20:57:21 Last Updated: 2024-08-03T20:03:05.697Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted application to cause permanent denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25335 State: PUBLISHED Published: 2021-03-04T20:58:08 Last Updated: 2024-08-03T20:03:05.638Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-703 Description: Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to access hidden notification contents over the lockscreen in specific condition. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25336 State: PUBLISHED Published: 2021-03-04T20:58:30 Last Updated: 2024-08-03T20:03:05.526Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25337 State: PUBLISHED Published: 2021-03-04T20:59:13.000Z Last Updated: 2025-10-21T23:25:52.563Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25338 State: PUBLISHED Published: 2021-03-04T20:59:55 Last Updated: 2024-08-03T20:03:05.579Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25339 State: PUBLISHED Published: 2021-03-04T21:00:23 Last Updated: 2024-08-03T20:03:05.208Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25340 State: PUBLISHED Published: 2021-03-04T21:01:24 Last Updated: 2024-08-03T20:03:05.621Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com
CVE ID: CVE-2021-25341 State: PUBLISHED Published: 2021-03-04T21:02:33 Last Updated: 2024-08-03T20:03:05.523Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: S Assistant Problem Types: CWE-287 Description: Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25342 State: PUBLISHED Published: 2021-03-04T21:03:01 Last Updated: 2024-08-03T20:03:05.300Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: SMP sdk Problem Types: CWE-287 Description: Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25343 State: PUBLISHED Published: 2021-03-04T21:03:38 Last Updated: 2024-08-03T20:03:05.469Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Members Problem Types: CWE-287 Description: Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25344 State: PUBLISHED Published: 2021-03-04T21:04:38 Last Updated: 2024-08-03T20:03:05.596Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: Exposure of Sensitive Information to an Unauthorized Actor Description: Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com/
CVE ID: CVE-2021-25345 State: PUBLISHED Published: 2021-03-04T21:05:05 Last Updated: 2024-08-03T20:03:05.206Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: Buffer Copy without Checking Size of Input ("Classic Buffer Overflow") Description: Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com/
CVE ID: CVE-2021-25346 State: PUBLISHED Published: 2021-03-04T21:06:27 Last Updated: 2024-08-03T20:03:05.695Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: Buffer Copy without Checking Size of Input ("Classic Buffer Overflow") Description: A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com/ - https://www.zerodayinitiative.com/advisories/ZDI-21-342/
CVE ID: CVE-2021-25347 State: PUBLISHED Published: 2021-03-04T21:05:56 Last Updated: 2024-08-03T20:03:05.548Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287 Description: Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to intercept when the provider is executed. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com/
CVE ID: CVE-2021-25348 State: PUBLISHED Published: 2021-03-04T21:07:19 Last Updated: 2024-08-03T20:03:05.571Z Severity: LOW (CVSS 2.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-703 Description: Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25349 State: PUBLISHED Published: 2021-03-25T16:09:01 Last Updated: 2024-08-03T20:03:05.365Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Slow Motion Editor Problem Types: CWE-284 Description: Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25350 State: PUBLISHED Published: 2021-03-25T16:10:01 Last Updated: 2024-08-03T20:03:05.595Z Severity: LOW (CVSS 2 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-200 Description: Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via log. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25351 State: PUBLISHED Published: 2021-03-25T16:10:55 Last Updated: 2024-08-03T20:03:05.518Z Severity: LOW (CVSS 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Account Problem Types: CWE-285 Description: Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25352 State: PUBLISHED Published: 2021-03-25T16:11:37 Last Updated: 2024-08-03T20:03:05.562Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Bixby Voice Problem Types: CWE-285 Description: Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25353 State: PUBLISHED Published: 2021-03-25T16:12:16 Last Updated: 2024-08-03T20:03:05.491Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Galaxy Themes Problem Types: CWE-285 Description: Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25354 State: PUBLISHED Published: 2021-03-25T16:13:14 Last Updated: 2024-08-03T20:03:05.633Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-285 Description: Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25355 State: PUBLISHED Published: 2021-03-25T16:13:55 Last Updated: 2024-08-03T20:03:05.414Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-285 Description: Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/serviceWeb.smsb
CVE ID: CVE-2021-25356 State: PUBLISHED Published: 2021-04-09T17:29:01 Last Updated: 2024-08-03T20:03:05.614Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com/ - https://blog.oversecured.com/
s://security.samsungmobile.com/securityUpdate.smsb - https://security.samsungmobile.com/ - https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/
CVE ID: CVE-2021-25357 State: PUBLISHED Published: 2021-04-09T17:34:22 Last Updated: 2024-08-03T20:03:05.616Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2021-25358 State: PUBLISHED Published: 2021-04-09T17:34:40 Last Updated: 2024-08-03T20:03:05.575Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-256 Description: A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission via untrusted applications. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/ - https://security.samsungmobile.com/securityUpdate.smsb