Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-25489 State: PUBLISHED Published: 2021-10-06T17:10:39.000Z Last Updated: 2025-10-21T23:25:30.375Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE ID: CVE-2021-25490 State: PUBLISHED Published: 2021-10-06T17:10:45 Last Updated: 2024-08-03T20:03:05.763Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-287 Description: A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE ID: CVE-2021-25491 State: PUBLISHED Published: 2021-10-06T17:10:51 Last Updated: 2024-08-03T20:03:05.595Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-476 Description: A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10
CVE ID: CVE-2021-25492 State: PUBLISHED Published: 2021-10-06T17:10:57 Last Updated: 2024-08-03T20:03:05.753Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-787 Description: Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25493 State: PUBLISHED Published: 2021-10-06T17:11:03 Last Updated: 2024-08-03T20:03:05.614Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125 Description: Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25494 State: PUBLISHED Published: 2021-10-06T17:11:12 Last Updated: 2024-08-03T20:03:05.764Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-125 Description: A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25495 State: PUBLISHED Published: 2021-10-06T17:11:19 Last Updated: 2024-08-03T20:03:05.855Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-122 Description: A possible heap buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25496 State: PUBLISHED Published: 2021-10-06T17:11:26 Last Updated: 2024-08-03T20:03:05.665Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-120 Description: A possible buffer overflow vulnerability in maetd_dec_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25497 State: PUBLISHED Published: 2021-10-06T17:11:32 Last Updated: 2024-08-03T20:03:05.753Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-120 Description: A possible buffer overflow vulnerability in maetd_cpy_slice of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25498 State: PUBLISHED Published: 2021-10-06T17:11:39 Last Updated: 2024-08-03T20:03:05.614Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Samsung Mobile Products: Samsung Notes Problem Types: CWE-120 Description: A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25499 State: PUBLISHED Published: 2021-10-06T17:11:46 Last Updated: 2024-08-03T20:03:05.582Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-285 Description: Intent redirection vulnerability in SamsungAccountSDKSigninActivity of Galaxy Store prior to version 4.5.32.4 allows attacker to access content provider of Galaxy Store. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=10
CVE ID: CVE-2021-25500 State: PUBLISHED Published: 2021-11-05T02:03:21 Last Updated: 2024-08-03T20:03:05.679Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=11
CVE ID: CVE-2021-25501 State: PUBLISHED Published: 2021-11-05T02:03:26 Last Updated: 2024-08-03T20:03:05.587Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: An improper access control vulnerability in SCloudBnRReceiver in SecTelephonyProvider prior to SMR Nov-2021 Release 1 allows untrusted application to call some protected providers. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=11
CVE ID: CVE-2021-25502 State: PUBLISHED Published: 2021-11-05T02:03:32 Last Updated: 2024-08-03T20:03:05.658Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: A vulnerability of storing sensitive information insecurely in Property Settings prior to SMR Nov-2021 Release 1 allows attackers to read ESN value without priviledge. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=11
CVE ID: CVE-2021-25503 State: PUBLISHED Published: 2021-11-05T02:03:38 Last Updated: 2024-08-03T20:03:05.925Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=11
CVE ID: CVE-2021-25504 State: PUBLISHED Published: 2021-11-05T02:03:44 Last Updated: 2024-08-03T20:03:05.736Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Group Sharing Problem Types: CWE-20 Description: Intent redirection vulnerability in Group Sharing prior to 10.8.03.2 allows attacker to access contact information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=11
CVE ID: CVE-2021-25505 State: PUBLISHED Published: 2021-11-05T02:03:51 Last Updated: 2024-08-03T20:03:05.801Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Pass Problem Types: CWE-287 Description: Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=11
CVE ID: CVE-2021-25506 State: PUBLISHED Published: 2021-11-05T02:03:57 Last Updated: 2024-08-03T20:03:05.770Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Health Problem Types: CWE-287 Description: Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=11
CVE ID: CVE-2021-25507 State: PUBLISHED Published: 2021-11-05T02:04:03 Last Updated: 2024-08-03T20:11:26.666Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Flow Problem Types: CWE-285 Description: Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=11
CVE ID: CVE-2021-25508 State: PUBLISHED Published: 2021-11-05T02:04:10 Last Updated: 2024-08-03T20:11:26.685Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: SmartThings Problem Types: CWE-269 Description: Improper privilege management vulnerability in API Key used in SmartThings prior to 1.7.73.22 allows an attacker to abuse the API key without limitation. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=11
CVE ID: CVE-2021-25509 State: PUBLISHED Published: 2021-11-05T02:04:17 Last Updated: 2024-08-03T20:11:26.937Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Flow Problem Types: CWE-20 Description: A missing input validation in Samsung Flow Windows application prior to Version 4.8.5.0 allows attackers to overwrite abtraty file in the Windows known folders. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=11
CVE ID: CVE-2021-25510 State: PUBLISHED Published: 2021-12-08T14:19:26 Last Updated: 2024-08-03T20:11:26.955Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows local arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25511 State: PUBLISHED Published: 2021-12-08T14:19:31 Last Updated: 2024-08-03T20:11:26.925Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: An improper validation vulnerability in FilterProvider prior to SMR Dec-2021 Release 1 allows attackers to write arbitrary files via a path traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25512 State: PUBLISHED Published: 2021-12-08T14:19:35 Last Updated: 2024-08-03T20:11:26.690Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: An improper validation vulnerability in telephony prior to SMR Dec-2021 Release 1 allows attackers to launch certain activities. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25513 State: PUBLISHED Published: 2021-12-08T14:19:40 Last Updated: 2024-08-03T20:11:27.050Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25514 State: PUBLISHED Published: 2021-12-08T14:19:44 Last Updated: 2024-08-03T20:11:27.117Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: Improper Input Validation Description: An improper intent redirection handling in Tags prior to SMR Dec-2021 Release 1 allows attackers to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25515 State: PUBLISHED Published: 2021-12-08T14:19:49 Last Updated: 2024-08-03T20:11:27.082Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: An improper usage of implicit intent in SemRewardManager prior to SMR Dec-2021 Release 1 allows attackers to access BSSID. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25516 State: PUBLISHED Published: 2021-12-08T14:19:55 Last Updated: 2024-08-03T20:11:26.951Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-703 Description: An improper check or handling of exceptional conditions in Exynos baseband prior to SMR Dec-2021 Release 1 allows attackers to track locations. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25517 State: PUBLISHED Published: 2021-12-08T14:20:01 Last Updated: 2024-08-03T20:11:27.096Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25518 State: PUBLISHED Published: 2021-12-08T14:20:06 Last Updated: 2024-08-03T20:11:26.929Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-119 Description: An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25519 State: PUBLISHED Published: 2021-12-08T14:20:11 Last Updated: 2024-08-03T20:11:26.915Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-200 Description: An improper access control vulnerability in CPLC prior to SMR Dec-2021 Release 1 allows local attackers to access CPLC information without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=12
CVE ID: CVE-2021-25520 State: PUBLISHED Published: 2021-12-08T14:20:15 Last Updated: 2024-08-03T20:11:27.015Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-20 Description: Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25521 State: PUBLISHED Published: 2021-12-08T14:20:21 Last Updated: 2024-08-03T20:11:27.099Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Internet Problem Types: CWE-285 Description: Insecure caller check in sharevia deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to get current tab URL in Samsung Internet. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25522 State: PUBLISHED Published: 2021-12-08T14:20:26 Last Updated: 2024-08-03T20:11:27.121Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Capture Problem Types: CWE- 922: Insecure Storage of Sensitive Information Description: Insecure storage of sensitive information vulnerability in Smart Capture prior to version 4.8.02.10 allows attacker to access victim's captured images without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25523 State: PUBLISHED Published: 2021-12-08T14:20:32 Last Updated: 2024-08-03T20:11:27.120Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: SamsungDialer Problem Types: CWE-922 Description: Insecure storage of device information in Samsung Dialer prior to version 12.7.05.24 allows attacker to get Samsung Account ID. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25524 State: PUBLISHED Published: 2021-12-08T14:20:42 Last Updated: 2024-08-03T20:11:27.105Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Contacts Problem Types: CWE-922 Description: Insecure storage of device information in Contacts prior to version 12.7.05.24 allows attacker to get Samsung Account ID. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25525 State: PUBLISHED Published: 2021-12-08T14:20:47 Last Updated: 2024-08-03T20:11:27.114Z Severity: LOW (CVSS 2 CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:C/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Problem Types: CWE-703 Description: Improper check or handling of exception conditions vulnerability in Samsung Pay (US only) prior to version 4.0.65 allows attacker to use NFC without user recognition. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25526 State: PUBLISHED Published: 2021-12-08T14:20:51 Last Updated: 2024-08-03T20:11:27.110Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Blockchain Wallet Problem Types: CWE-926 Description: Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25527 State: PUBLISHED Published: 2021-12-08T14:20:57 Last Updated: 2024-08-03T20:11:27.090Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Pay Problem Types: CWE-926 Description: Improper export of Android application components vulnerability in Samsung Pay (India only) prior to version 4.1.77 allows attacker to access Bill Pay and Recharge menu without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2021&month=12
CVE ID: CVE-2021-25630 State: PUBLISHED Published: 2021-02-23T15:33:49.271890Z Last Updated: 2024-09-16T22:14:42.289Z Vendors: Collabora Productivity, The Document Foundation Products: Collabora Online, LibreOffice Online Problem Types: "loolforkit" privileged program local root exploit Description: "loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this check was wrong, so a normal user could start "loolforkit" and eventually get local root privileges. A
"loolforkit" this check was wrong, so a normal user could start "loolforkit" and eventually get local root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CollaboraOnline/online/security/advisories/GHSA-49w3-gr3w-m68v - https://www.openwall.com/lists/oss-security/2021/01/18/3
CVE ID: CVE-2021-25631 State: PUBLISHED Published: 2021-05-03T11:10:33.079682Z Last Updated: 2024-09-16T17:08:37.634Z Vendors: The Document Foundation Products: LibreOffice Problem Types: CWE-184 Description: In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't match the denylist but results in ShellExecute attempting to launch an executable type. Additional Analyst Notes: - CVE Program Container: References: - https://positive.security/blog/url-open-rce#open-libreoffice - https://www.libreoffice.org/about-us/security/advisories/cve-2021-25631/
CVE ID: CVE-2021-25633 State: PUBLISHED Published: 2021-10-11T16:43:34.400173Z Last Updated: 2024-09-16T18:28:34.730Z Vendors: The Document Foundation Products: LibreOffice Problem Types: CWE-295 Description: LibreOffice supports digital signatures of ODF documents and macros within documents, presenting visual aids that no alteration of the document occurred since the last signing and that the signature is valid. An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to create a digitally signed ODF document, by manipulating the documentsignatures.xml or macrosignatures.xml stream within the document to combine multiple certificate data, which when opened caused