3441 vulnerabilidades · General Orden: CVSS EPSS Año ID
CVE-2022-27837
Accessibility General
4.4
MEDIUM
EPSS
0.2%
2022 CWE-94 1 PoC

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R(11.0) and 13.0.1.1 in Android S(12.0) allows attacker to access the file with system privilege.

CVE-2022-36855
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-416 1 PoC

A use after free vulnerability in iva_ctl driver prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVE-2022-24930
Samsung Wearable Devices General
4.4
MEDIUM
EPSS
0.2%
2022 CWE-284 1 PoC

An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission

CVE-2022-28778
Samsung Security Supporter General
4.4
MEDIUM
EPSS
0.1%
2022 CWE-284 1 PoC

Improper access control vulnerability in Samsung Security Supporter prior to version 1.2.40.0 allows attacker to set the arbitrary folder as Secret Folder without Samsung Security Supporter permission

CVE-2022-22285
Reminder General
4.4
MEDIUM
EPSS
0.1%
2022 CWE-94 1 PoC

A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.

CVE-2022-24925
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-20 1 PoC

Improper input validation vulnerability in SettingsProvider prior to Android S(12) allows privileged attackers to trigger a permanent denial of service attack on a victim's devices.

CVE-2022-39897
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-200 1 PoC

Exposure of Sensitive Information vulnerability in kernel prior to SMR Dec-2022 Release 1 allows attackers to access the kernel address information via log.

CVE-2022-36860
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-122 1 PoC

A heap-based overflow vulnerability in LoadEnvironment function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVE-2022-34673
NVIDIA GPU Display Driver for Linux General
4.4
MEDIUM
EPSS
0.1%
2022 CWE-190 1 PoC

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where an out-of-bounds array access may lead to denial of service, information disclosure, or data tampering.

CVE-2022-36846
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-122 1 PoC

A heap-based overflow vulnerability in ConstructDictionary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVE-2022-36858
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-122 1 PoC

A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc() function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVE-2022-0486
Fidelis Network General
4.4
MEDIUM
EPSS
0.1%
2022 CWE-276 2 PoCs

Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.

CVE-2022-24413
PowerScale OneFS General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-367 1 PoC

Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss.

CVE-2022-22270
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.1%
2022 CWE-94 1 PoC

An implicit Intent hijacking vulnerability in Dialer prior to SMR Jan-2022 Release 1 allows unprivileged applications to access contact information.

CVE-2022-36842
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-122 1 PoC

A heap-based overflow vulnerability in prepareRecogLibrary function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVE-2022-33717
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 1 PoC

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory.

CVE-2022-36862
Samsung Mobile Devices General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-122 1 PoC

A heap-based overflow vulnerability in HWR::EngineCJK::Impl::Construct() in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault.

CVE-2022-2888
octoprint/octoprint General
4.4
MEDIUM
EPSS
0.0%
2022 CWE-613 1 PoC

If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use this cookie to authenticate as long as the victim's account exists.

CVE-2022-46396
Software Genérico General
4.4
MEDIUM
EPSS
0.2%
2022 1 PoC

An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.

CVE-2022-23434
Bixby Vision General
4.4
MEDIUM
EPSS
0.1%
2022 CWE-94 1 PoC

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.