Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-36841 State: PUBLISHED Published: 2022-09-09T14:39:58 Last Updated: 2024-08-03T10:14:28.586Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in PrepareRecogLibrary_Part function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36842 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:28.421Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36843 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:28.416Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36844 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:28.600Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in HWR::EngJudgeModel::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36845 State: PUBLISHED Published: 2022-09-09T14:39:58 Last Updated: 2024-08-03T10:14:28.413Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in MHW_RECOG_LIB_INFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36846 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:28.478Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36847 State: PUBLISHED Published: 2022-09-09T14:39:58 Last Updated: 2024-08-03T10:14:28.564Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-416 Description: Use after free vulnerability in mtp_send_signal function of MTP driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36848 State: PUBLISHED Published: 2022-09-09T14:40:02 Last Updated: 2024-08-03T10:14:28.479Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285 Description: Improper Authorization vulnerability in setDualDARPolicyCmd prior to SMR Sep-2022 Release 1 allows local attackers to cause local permanent denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36849 State: PUBLISHED Published: 2022-09-09T14:39:58 Last Updated: 2024-08-03T10:14:28.479Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-416 Description: Use after free vulnerability in sdp_mm_set_process_sensitive function of sdpmm driver prior to SMR Sep-2022 Release 1 allows attackers to perform malicious actions. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36850 State: PUBLISHED Published: 2022-09-09T14:40:04 Last Updated: 2024-08-03T10:14:28.571Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Path traversal vulnerability in CallBGProvider prior to SMR Sep-2022 Release 1 allows attacker to overwrite arbitrary file with phone uid. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36851 State: PUBLISHED Published: 2022-09-09T14:40:05 Last Updated: 2024-08-03T10:14:28.867Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung pass Problem Types: CWE-284 Description: Improper access control vulnerability in Samsung pass prior to version 4.0.03.1 allow physical attackers to access data of Samsung pass on a certain state of an unlocked device. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36852 State: PUBLISHED Published: 2022-09-09T14:40:03 Last Updated: 2024-08-03T10:14:29.088Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285 Description: Improper Authorization vulnerability in Video Editor prior to SMR Sep-2022 Release 1 allows local attacker to access internal application data. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36853 State: PUBLISHED Published: 2022-09-09T14:40:03 Last Updated: 2024-08-03T10:14:29.073Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Intent redirection in Photo Editor prior to SMR Sep-2022 Release 1 allows attacker to get sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36854 State: PUBLISHED Published: 2022-09-09T14:40:00 Last Updated: 2024-08-03T10:14:28.812Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36855 State: PUBLISHED Published: 2022-09-09T14:40:05 Last Updated: 2024-08-03T10:14:28.910Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-416 Description: A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36856 State: PUBLISHED Published: 2022-09-09T14:40:03 Last Updated: 2024-08-03T10:14:29.314Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via undefined permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36857 State: PUBLISHED Published: 2022-09-09T14:40:04 Last Updated: 2024-08-03T10:14:29.302Z Severity: LOW (CVSS 1.9 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-285 Description: Improper Authorization vulnerability in Photo Editor prior to SMR Sep-2022 Release 1 allows physical attackers to read internal application data. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36858 State: PUBLISHED Published: 2022-09-09T14:40:00 Last Updated: 2024-08-03T10:14:28.940Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36859 State: PUBLISHED Published: 2022-09-09T14:39:58 Last Updated: 2024-08-03T10:14:28.944Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: SmartTagPlugin Problem Types: CWE-20 Description: Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim&#39;s devices. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36860 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:28.958Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36861 State: PUBLISHED Published: 2022-09-09T14:40:03 Last Updated: 2024-08-03T10:14:28.861Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: Custom permission misuse vulnerability in SystemUI prior to SMR Sep-2022 Release 1 allows attacker to use some protected functions with SystemUI privilege. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36862 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:28.819Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36863 State: PUBLISHED Published: 2022-09-09T14:39:59 Last Updated: 2024-08-03T10:14:29.048Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-122 Description: A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=09
CVE ID: CVE-2022-36864 State: PUBLISHED Published: 2022-09-09T14:40:05 Last Updated: 2024-08-03T10:14:29.067Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Email Problem Types: CWE-284 Description: Improper access control and intent redirection in Samsung Email prior to 6.1.70.20 allows attacker to access specific formatted file and execute privileged behavior. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36865 State: PUBLISHED Published: 2022-09-09T14:40:04 Last Updated: 2024-08-03T10:14:28.882Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Group Sharing Problem Types: CWE-284 Description: Improper access control in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to access device information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36866 State: PUBLISHED Published: 2022-09-09T14:40:04 Last Updated: 2024-08-03T10:14:28.911Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Group Sharing Problem Types: CWE-284 Description: Improper access control vulnerability in Broadcaster in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36867 State: PUBLISHED Published: 2022-09-09T14:40:04 Last Updated: 2024-08-03T10:14:28.949Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Editor Lite Problem Types: CWE-284 Description: Improper access control vulnerability in Editor Lite prior to version 4.0.40.14 allows attackers to access sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36868 State: PUBLISHED Published: 2022-10-07T00:00:00 Last Updated: 2024-08-03T10:14:28.882Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper restriction of broadcasting Intent in MouseNKeyHidDevice prior to SMR Oct-2022 Release 1 leaks MAC address of the connected Bluetooth device. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=10
CVE ID: CVE-2022-36869 State: PUBLISHED Published: 2022-09-09T14:40:05 Last Updated: 2024-08-03T10:14:29.317Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: com.android.providers.contacts Problem Types: CWE-284 Description: Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36870 State: PUBLISHED Published: 2022-09-09T14:40:01 Last Updated: 2024-08-03T10:14:28.943Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Problem Types: CWE-285 Description: Pending Intent hijacking vulnerability in MTransferNotificationManager in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36871 State: PUBLISHED Published: 2022-09-09T14:40:01 Last Updated: 2024-08-03T10:14:29.088Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Problem Types: CWE-285 Description: Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36872 State: PUBLISHED Published: 2022-09-09T14:40:02 Last Updated: 2024-08-03T10:14:29.047Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Pay Problem Types: CWE-285 Description: Pending Intent hijacking vulnerability in SpayNotification in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36873 State: PUBLISHED Published: 2022-09-09T14:40:01 Last Updated: 2024-08-03T10:14:29.328Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: com.samsung.android.waterplugin Problem Types: CWE-20 Description: Improper restriction of broadcasting Intent in GalaxyStoreBridgePageLinker of?Waterplugin prior to version 2.2.11.22081151 leaks MAC address of the connected Bluetooth device. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36874 State: PUBLISHED Published: 2022-09-09T14:40:00 Last Updated: 2024-08-03T10:14:28.977Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Waterplugin Problem Types: CWE-280 Description: Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36875 State: PUBLISHED Published: 2022-09-09T14:40:00 Last Updated: 2024-08-03T10:14:28.972Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: com.samsung.android.waterplugin Problem Types: CWE-284 Description: Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36876 State: PUBLISHED Published: 2022-09-09T14:39:58 Last Updated: 2024-08-03T10:14:29.060Z Severity: LOW (CVSS 1.8 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Pass Problem Types: CWE-285 Description: Improper authorization in UPI payment in Samsung Pass prior to version 4.0.04.10 allows physical attackers to access account list without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36877 State: PUBLISHED Published: 2022-09-09T14:39:57 Last Updated: 2024-08-03T10:14:29.323Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Members Problem Types: CWE-200 Description: Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36878 State: PUBLISHED Published: 2022-09-09T14:39:57 Last Updated: 2024-08-03T10:14:28.944Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Find My Mobile Problem Types: CWE-200 Description: Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log. Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09
CVE ID: CVE-2022-36879 State: PUBLISHED Published: 2022-07-27T03:27:41.000Z Last Updated: 2025-05-05T16:13:47.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=f85daf0e725358be78dfd208dea5fd665d8cb901 - https://github.com/torvalds/linux/commit/f85daf0e725358be78dfd208dea5fd665d8cb901 - https://www.debian.org/security/2022/dsa-5207 - https://security.netapp.com/adviso
f0e725358be78dfd208dea5fd665d8cb901 - https://www.debian.org/security/2022/dsa-5207 - https://security.netapp.com/advisory/ntap-20220901-0007/ - https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html - https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html
CVE ID: CVE-2022-36880 State: PUBLISHED Published: 2022-07-27T03:32:30 Last Updated: 2024-08-03T10:14:29.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Read Mail module in Webmin 1.995 and Usermin through 1.850 allows XSS via a crafted HTML e-mail message. Additional Analyst Notes: - CVE Program Container: References: - https://www.webmin.com/security.html
CVE ID: CVE-2022-36881 State: PUBLISHED Published: 2022-07-27T14:20:49 Last Updated: 2024-08-03T10:14:29.073Z Vendors: Jenkins project Products: Jenkins Git client Plugin Description: Jenkins Git client Plugin 3.11.0 and earlier does not perform SSH host key verification when connecting to Git repositories via SSH, enabling man-in-the-middle attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.jenkins.io/security/advisory/2022-07-27/#SECURITY-1468 - http://www.openwall.com/lists/oss-security/2022/07/27/1