Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-34647 State: PUBLISHED Published: 2024-09-04T05:32:31.311Z Last Updated: 2024-09-04T13:16:28.875Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-648: Incorrect Use of Privileged APIs Description: Incorrect use of privileged API in DualDarManagerProxy prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to knox without proper license. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34648 State: PUBLISHED Published: 2024-09-04T05:32:32.433Z Last Updated: 2024-09-04T13:16:46.639Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper Handling of Insufficient Permissions in KnoxMiscPolicy prior to SMR Sep-2024 Release 1 allows local attackers to access sensitive data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34649 State: PUBLISHED Published: 2024-09-04T05:32:33.562Z Last Updated: 2024-09-04T13:17:21.210Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in new Dex Mode in multitasking framework prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access an unlocked screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34650 State: PUBLISHED Published: 2024-09-04T05:32:34.690Z Last Updated: 2024-09-04T13:17:51.476Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-863: Incorrect Authorization Description: Incorrect authorization in CocktailbarService prior to SMR Sep-2024 Release 1 allows local attackers to access privileged APIs related to Edge panel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34651 State: PUBLISHED Published: 2024-09-04T05:32:35.811Z Last Updated: 2024-09-04T13:18:07.291Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285: Improper Authorization Description: Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34652 State: PUBLISHED Published: 2024-09-04T05:32:37.127Z Last Updated: 2024-09-04T13:18:19.431Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-863: Incorrect Authorization Description: Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34653 State: PUBLISHED Published: 2024-09-04T05:32:38.253Z Last Updated: 2024-09-04T12:59:29.694Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) Description: Path Traversal in My Files prior to SMR Sep-2024 Release 1 allows physical attackers to access directories with My Files' privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34654 State: PUBLISHED Published: 2024-09-04T05:32:39.426Z Last Updated: 2024-09-04T12:58:55.036Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-926 : Improper Export of Android Application Components Description: Improper Export of android application component in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access files with My Files' privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34655 State: PUBLISHED Published: 2024-09-04T05:32:40.648Z Last Updated: 2024-09-04T12:59:10.893Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-648: Incorrect Use of Privileged APIs Description: Incorrect use of privileged API in UniversalCredentialManager prior to SMR Sep-2024 Release 1 allows local attackers to access privileged API related to UniversalCredentialManager. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=09
CVE ID: CVE-2024-34656 State: PUBLISHED Published: 2024-09-04T05:32:41.804Z Last Updated: 2024-09-04T12:51:22.776Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-35: Path Traversal Description: Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE ID: CVE-2024-34657 State: PUBLISHED Published: 2024-09-04T05:32:42.971Z Last Updated: 2024-09-04T12:50:54.141Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-121: Stack-based Buffer Overflow Description: Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE ID: CVE-2024-34658 State: PUBLISHED Published: 2024-09-04T05:32:44.085Z Last Updated: 2024-09-04T12:49:18.969Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125: Out-of-bounds Read Description: Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE ID: CVE-2024-34659 State: PUBLISHED Published: 2024-09-04T05:32:45.209Z Last Updated: 2024-09-04T12:47:40.328Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Group Sharing Problem Types: CWE-200: Exposure of Sensitive Information Description: Exposure of sensitive information in GroupSharing prior to version 13.6.13.3 allows remote attackers can force the victim to join the group. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE ID: CVE-2024-34660 State: PUBLISHED Published: 2024-09-04T05:32:46.359Z Last Updated: 2024-09-04T12:48:35.863Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-122: Heap-based Buffer Overflow Description: Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE ID: CVE-2024-34661 State: PUBLISHED Published: 2024-09-04T05:32:47.507Z Last Updated: 2024-09-04T12:44:31.149Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Assistant Problem Types: CWE-280: Improper Handling of Insufficient Permissions or Privileges Description: Improper handling of insufficient permissions in Samsung Assistant prior to version 9.1.00.7 allows remote attackers to access location data. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=09
CVE ID: CVE-2024-34662 State: PUBLISHED Published: 2024-10-08T06:30:42.509Z Last Updated: 2024-10-08T13:28:32.263Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in ActivityManager prior to SMR Oct-2024 Release 1 in select Android 12, 13 and SMR Sep-2024 Release 1 in select Android 14 allows local attackers to execute privileged behaviors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34663 State: PUBLISHED Published: 2024-10-08T06:30:43.780Z Last Updated: 2024-10-08T13:28:09.362Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-680: Integer Overflow to Buffer Overflow Description: Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34664 State: PUBLISHED Published: 2024-10-08T06:30:44.963Z Last Updated: 2024-10-08T13:27:50.630Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-754: Improper Check for Unusual or Exceptional Conditions Description: Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a multi-user environment. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34665 State: PUBLISHED Published: 2024-10-08T06:30:46.198Z Last Updated: 2024-10-08T18:40:02.223Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34666 State: PUBLISHED Published: 2024-10-08T06:30:47.405Z Last Updated: 2024-10-08T18:39:04.974Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34667 State: PUBLISHED Published: 2024-10-08T06:30:48.635Z Last Updated: 2024-10-08T18:33:46.061Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34668 State: PUBLISHED Published: 2024-10-08T06:30:49.849Z Last Updated: 2024-10-08T18:30:18.540Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34669 State: PUBLISHED Published: 2024-10-08T06:30:51.317Z Last Updated: 2024-11-01T20:51:19.545Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=10
CVE ID: CVE-2024-34670 State: PUBLISHED Published: 2024-10-08T06:30:52.541Z Last Updated: 2024-10-08T13:27:19.140Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Sound Assistant Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=10
CVE ID: CVE-2024-34671 State: PUBLISHED Published: 2024-10-08T06:30:53.723Z Last Updated: 2024-10-08T13:26:50.646Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication in translation혻in Samsung Internet prior to version 26.0.3.1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=10
CVE ID: CVE-2024-34672 State: PUBLISHED Published: 2024-10-08T06:30:54.940Z Last Updated: 2024-10-08T13:25:40.797Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: SamsungVideoPlayer Problem Types: CWE-20: Improper Input Validation Description: Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=10
CVE ID: CVE-2024-34673 State: PUBLISHED Published: 2024-11-06T02:16:59.701Z Last Updated: 2024-11-06T11:23:13.163Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20: Improper Input Validation Description: Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34674 State: PUBLISHED Published: 2024-11-06T02:17:00.954Z Last Updated: 2024-11-06T11:22:54.546Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284: Improper Access Control Description: Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34675 State: PUBLISHED Published: 2024-11-06T02:17:02.153Z Last Updated: 2024-11-06T11:22:36.080Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Improper Access Control Description: Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34676 State: PUBLISHED Published: 2024-11-06T02:17:03.360Z Last Updated: 2024-11-06T11:22:17.237Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122: Heap-based Buffer Overflow Description: Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34677 State: PUBLISHED Published: 2024-11-06T02:17:04.515Z Last Updated: 2024-11-06T11:21:58.544Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Description: Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34678 State: PUBLISHED Published: 2024-11-06T02:17:05.626Z Last Updated: 2024-11-06T11:21:33.901Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Out-of-bounds Write Description: Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34679 State: PUBLISHED Published: 2024-11-06T02:17:06.753Z Last Updated: 2024-11-06T11:21:13.839Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-276: Incorrect Default Permissions Description: Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34680 State: PUBLISHED Published: 2024-11-06T02:17:07.897Z Last Updated: 2024-11-06T11:20:54.006Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-927: Use of Implicit Intent for Sensitive Communication Description: Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34681 State: PUBLISHED Published: 2024-11-06T02:17:09.014Z Last Updated: 2024-11-06T11:20:34.357Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Improper Input Validation Description: Improper input validation in BluetoothAdapter prior to SMR Nov-2024 Release 1 allows local attackers to cause local permanent denial of service on Galaxy Watch. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34682 State: PUBLISHED Published: 2024-11-06T02:17:10.127Z Last Updated: 2024-11-06T11:20:15.831Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285: Improper Authorization Description: Improper authorization in Settings prior to SMR Nov-2024 Release 1 allows physical attackers to access stored WiFi password in Maintenance Mode. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=11
CVE ID: CVE-2024-34683 State: PUBLISHED Published: 2024-06-11T02:08:47.200Z Last Updated: 2024-08-02T02:59:22.208Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: SAP_SE Products: SAP Document Builder Problem Types: CWE-434 Description: An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3459379 - https://support.sap.com/en/my-support/knowledge-base/security-notes-new
References: - https://me.sap.com/notes/3459379 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
CVE ID: CVE-2024-34684 State: PUBLISHED Published: 2024-06-11T02:20:31.354Z Last Updated: 2024-08-02T02:59:21.825Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: SAP_SE Products: SAP BusinessObjects Business Intelligence Platform Problem Types: CWE-200 Description: On Unix, SAP BusinessObjects Business Intelligence Platform (Scheduling) allows an authenticated attacker with administrator access on the local server to access the password of a local account. As a result, an attacker can obtain non-administrative user credentials, which will allow them to read or modify the remote server files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Cont
ow them to read or modify the remote server files. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://me.sap.com/notes/3441817 - https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html