deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-36530
Published: 2022-06-07
Description: A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack can be initiated remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: http://seclists.org/fulldisclosure/2020/Oct/5; https://vuldb.com/?id.162262; http://seclists.org/fulldisclosure/2020/Oct/5
CVE: CVE-2020-36531
Published: 2022-06-07
Description: A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escalation. The attack may be initiated remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-1236
References: http://seclists.org/fulldisclosure/2020/Oct/5; https://vuldb.com/?id.162263; http://seclists.org/fulldisclosure/2020/Oct/5
CVE: CVE-2020-36532
Published: 2022-06-07
Description: A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Credentials). The attack can be initiated remotely. It is recommended to upgrade the affected app.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://vuldb.com/?id.160762; https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html; https://vuldb.com/?id.160762
CVE: CVE-2020-36533
Published: 2022-06-07
Description: A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely.
CVSS Score: 3.7 (LOW)
CWE: CWE-287, CWE-287
References: https://vuldb.com/?id.160763; https://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html; https://vuldb.com/?id.160763
CVE: CVE-2020-36534
Published: 2022-06-07
Description: A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out. The manipulation leads to cross site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/noumo/easyii/; https://vuldb.com/?id.160278; https://github.com/noumo/easyii/
CVE: CVE-2020-36535
Published: 2022-06-07
Description: A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.159957; https://vuldb.com/?id.159957
CVE: CVE-2020-36536
Published: 2022-06-07
Description: A vulnerability was found in Brandbugle. It has been rated as critical. Affected by this issue is some unknown functionality of the file /main.php. The manipulation leads to sql injection. The attack may be launched remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.159956; https://vuldb.com/?id.159956
CVE: CVE-2020-36537
Published: 2022-06-07
Description: A vulnerability was found in Everywhere CMS. It has been classified as critical. Affected is an unknown function. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.159954; https://vuldb.com/?id.159954
CVE: CVE-2020-36538
Published: 2022-06-07
Description: A vulnerability was found in Eatan CMS. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The attack can be launched remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.159955; https://vuldb.com/?id.159955
CVE: CVE-2020-36539
Published: 2022-06-07
Description: A vulnerability was found in Lógico y Creativo 1.0 and classified as critical. This issue affects some unknown processing. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.159953; https://vuldb.com/?id.159953
CVE: CVE-2020-36540
Published: 2022-06-07
Description: A vulnerability, which was classified as critical, was found in Neetai Tech. Affected is an unknown function of the file /product.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://vuldb.com/?id.159438; https://vuldb.com/?id.159438
CVE: CVE-2020-36541
Published: 2022-06-07
Description: A vulnerability was found in Demokratian. It has been rated as critical. Affected by this issue is some unknown functionality of the file basicos_php/genera_select.php. The manipulation of the argument id_provincia with the input -1%20union%20all%20select%201,2,3,4,database() leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89, CWE-89
References: https://alquimistadesistemas.com/sql-injection-y-archivo-peligroso-en-demokratian; https://bitbucket.org/csalgadow/demokratian_votaciones/commits/b56c48b519fc52efa65404c312ea9bbde320e3fa; https://vuldb.com/?id.159434
CVE: CVE-2020-36542
Published: 2022-06-07
Description: A vulnerability classified as critical has been found in Demokratian. This affects an unknown part of the file install/install3.php. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
CVSS Score: 7.3 (HIGH)
CWE: CWE-269, CWE-269
References: https://alquimistadesistemas.com/sql-injection-y-archivo-peligroso-en-demokratian; https://bitbucket.org/csalgadow/demokratian_votaciones/commits/0d073ee461edd5f42528d41e00bf0a7b22e86bb3; https://vuldb.com/?id.159435
CVE: CVE-2022-1708
Published: 2022-06-07
Description: A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-770
References: https://bugzilla.redhat.com/show_bug.cgi?id=2085361; https://github.com/cri-o/cri-o/commit/f032cf649ecc7e0c46718bd9e7814bfb317cb544; https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j
CVE: CVE-2022-28794
Published: 2022-06-07
Description: Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information.
CVSS Score: 2.2 (LOW)
CWE: CWE-213, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30709
Published: 2022-06-07
Description: Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.
CVSS Score: 2.5 (LOW)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30710
Published: 2022-06-07
Description: Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30711
Published: 2022-06-07
Description: Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30712
Published: 2022-06-07
Description: Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30713
Published: 2022-06-07
Description: Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30714
Published: 2022-06-07
Description: Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.
CVSS Score: 1.9 (LOW)
CWE: CWE-213, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30715
Published: 2022-06-07
Description: Improper access control vulnerability in DofViewer prior to SMR Jun-2022 Release 1 allows attackers to control floating system alert window.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30716
Published: 2022-06-07
Description: Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access toast message information from device.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30717
Published: 2022-06-07
Description: Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera functions via deeplink.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30719
Published: 2022-06-07
Description: Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.
CVSS Score: 2.5 (LOW)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30720
Published: 2022-06-07
Description: Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.
CVSS Score: 2.5 (LOW)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30721
Published: 2022-06-07
Description: Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash.
CVSS Score: 2.5 (LOW)
CWE: CWE-20, CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30722
Published: 2022-06-07
Description: Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30723
Published: 2022-06-07
Description: Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30724
Published: 2022-06-07
Description: Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30725
Published: 2022-06-07
Description: Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30726
Published: 2022-06-07
Description: Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of SecSettingsIntelligence.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30729
Published: 2022-06-07
Description: Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner.
CVSS Score: 3.3 (LOW)
CWE: CWE-923
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30727
Published: 2022-06-07
Description: Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value in work space.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-280, CWE-755
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30728
Published: 2022-06-07
Description: Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information.
CVSS Score: 1.9 (LOW)
CWE: CWE-213, CWE-668
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6; https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=6
CVE: CVE-2022-30730
Published: 2022-06-07
Description: Improper authorization in Samsung Pass prior to 1.0.00.33 allows physical attackers to acess account list without authentication.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-285
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30731
Published: 2022-06-07
Description: Improper access control vulnerability in My Files prior to version 13.1.00.193 allows attackers to access arbitrary private files in My Files application.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-862
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30732
Published: 2022-06-07
Description: Exposure of Sensitive Information vulnerability in Samsung Account prior to version 13.2.00.6 allows attacker to access sensitive information via onActivityResult.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30733
Published: 2022-06-07
Description: Sensitive information exposure in Sign-in log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30734
Published: 2022-06-07
Description: Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30735
Published: 2022-06-07
Description: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the access_token without permission.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30736
Published: 2022-06-07
Description: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30737
Published: 2022-06-07
Description: Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30738
Published: 2022-06-07
Description: Improper check in Loader in Samsung Internet prior to 17.0.1.69 allows attackers to spoof address bar via executing script.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-703, CWE-754
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30739
Published: 2022-06-07
Description: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level permission.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-269, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30740
Published: 2022-06-07
Description: Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-200, CWE-922
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30741
Published: 2022-06-07
Description: Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to get sim card information through device log.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30742
Published: 2022-06-07
Description: Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log.
CVSS Score: 3.3 (LOW)
CWE: CWE-200, CWE-532
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30743
Published: 2022-06-07
Description: Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-269
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30744
Published: 2022-06-07
Description: DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arbitrary code.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-20, CWE-427
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30745
Published: 2022-06-07
Description: Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-284
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30746
Published: 2022-06-07
Description: Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.
CVSS Score: 7.5 (HIGH)
CWE: CWE-285, CWE-862
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30747
Published: 2022-06-07
Description: PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30748
Published: 2022-06-07
Description: Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-561
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6
CVE: CVE-2022-30749
Published: 2022-06-07
Description: Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.
CVSS Score: 3.3 (LOW)
CWE: CWE-287, CWE-287
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6; https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6