Page 14 of 1052 results (0.005 seconds)

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-18695

https://notcve.org/view.php?id=CVE-2017-18695

07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's credentials, during an email account login, via an EAS autodiscover packet. The Samsung ID is SVE-2016-7654 (January 2017). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1), M(6.0), y N(7.0). Los atacantes (que controlan un determinado subdominio) pueden detectar las credenciales de un us... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-522: Insufficiently Protected Credentials •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2016-11026

https://notcve.org/view.php?id=CVE-2016-11026

07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. BootReceiver allows attackers to trigger a system crash because of incorrect exception handling. The Samsung ID is SVE-2016-7118 (December 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0). BootReceiver permite a atacantes activar un bloqueo del sistema debido al manejo incorrecto de excepciones. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-755: Improper Handling of Exceptional Conditions •

CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2016-11030

https://notcve.org/view.php?id=CVE-2016-11030

07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does not prevent concurrent access, leading to a race condition and resultant heap-based buffer overflow. The Samsung ID is SVE-2016-7341 (December 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0) (con soporte de sensor Hrm). El sysfs del controlador del sensor MAX86902 no impide ... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2016-11031

https://notcve.org/view.php?id=CVE-2016-11031

07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. AntService allows a system_server crash and reboot. The Samsung ID is SVE-2016-7044 (November 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0). AntService permite un bloqueo y reinicio de system_server. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2016-11039

https://notcve.org/view.php?id=CVE-2016-11039

07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NULL pointer dereference issue in the IPC socket code. The Samsung ID is SVE-2016-5980 (July 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software KK(4.4), L(5.0/5.1) y M(6.0) (AP + CP MDM9x35 o Qualcomm Onechip). Se presenta un problema de desreferencia del puntero NULL en el código de socket IPC. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-476: NULL Pointer Dereference •

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-11041

https://notcve.org/view.php?id=CVE-2016-11041

07 Apr 2020 — An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending an AT command over USB. The Samsung ID is SVE-2015-5301 (June 2016). Se detectó un problema en dispositivos móviles Samsung con versión de software KK(4.4). Los atacantes pueden omitir la pantalla de bloqueo mediante el envío de un comando AT a través de USB. • https://security.samsungmobile.com/securityUpdate.smsb • CWE-287: Improper Authentication •

CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0

CVE-2016-11046

https://notcve.org/view.php?id=CVE-2016-11046

07 Apr 2020 — An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused whitelist, attackers can reach the radio layer (aka RIL or RILD) to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 (May 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software JBP(4.3), KK(4.4) y L(5.0/5.1). Debido a una lista blanca usada inapropiadamente, unos atacantes pueden alcanzar la capa radio (también se conoce como RIL o RILD) pa... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2016-11047

https://notcve.org/view.php?id=CVE-2016-11047

07 Apr 2020 — An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. The ACIPC-MSOCKET driver allows local privilege escalation via a stack-based buffer overflow. The Samsung ID is SVE-2016-5393 (April 2016). Se detectó un problema en dispositivos móviles Samsung con versiones de software versiones JBP(4.2) y KK(4.4) (chipsets Marvell). El controlador ACIPC-MSOCKET permite una escalada de privilegios locales por medio de un desbordamiento de búfer en la región stack de la... • https://security.samsungmobile.com/securityUpdate.smsb • CWE-787: Out-of-bounds Write •

CVSS: 9.0EPSS: 2%CPEs: 1EXPL: 1

CVE-2014-7224

https://notcve.org/view.php?id=CVE-2014-7224

07 Feb 2020 — A Code Execution vulnerability exists in Android prior to 4.4.0 related to the addJavascriptInterface method and the accessibility and accessibilityTraversal objects, which could let a remote malicious user execute arbitrary code. Se presenta una vulnerabilidad de ejecución de código en Android versiones anteriores a 4.4.0, relacionada con el método addJavascriptInterface y los objetos accessibility y accessibilityTraversal, lo que podría permitir a un usuario malicioso remoto ejecutar código arbitrario. • http://www.openwall.com/lists/oss-security/2014/10/02/20 • CWE-20: Improper Input Validation •

CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 1

CVE-2013-6792 – Google Android - Signature Verification Security Bypass

https://notcve.org/view.php?id=CVE-2013-6792

23 Jan 2020 — Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability Google Android versiones anteriores a 4.4, presenta una Vulnerabilidad de Omisión de Seguridad de Firma APK. • https://www.exploit-db.com/exploits/38821 •