CVEs published in February 2023
2,729 vulnerabilities, 255 critical, 10 exploited.
- samsung flow, samsung mobile flow for pc +1 moreImproper cryptographic implementation in Samsung Flow for PC 4.9.14.0 allows adjacent attackers...7.5 High
- samsung flow, samsung mobile flow for android +1 moreImproper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows...7.5 High
- samsung android, samsung mobile runestone +1 moreImproper access control vulnerability in Runestone application prior to version 2.9.09.003 in...4.0 Medium
- samsung android, samsung mobile routine +1 moreInsufficient Verification of Data Authenticity vulnerability in Routine prior to versions 2.6.30...7.4 High
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1...6.2 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in UwbDataTxStatusEvent prior to SMR Feb-2023 Release 1...8.5 High
- samsung android, samsung mobile devices +1 moreImproper logic in HomeScreen prior to SMR Feb-2023 Release 1 allows physical attacker to access...2.1 Low
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in Phone application prior to SMR Feb-2023 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper usage of implicit intent in Contacts prior to SMR Feb-2023 Release 1 allows attacker to...3.3 Low
- samsung android, samsung mobile devices +1 moreExposure of Sensitive Information vulnerability in Fingerprint TA prior to SMR Feb-2023 Release 1...4.4 Medium
- samsung galaxy storeImproper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local...6.2 Medium
- samsung galaxy storeImproper access control vulnerability in Galaxy Store prior to version 4.5.49.8 allows local...7.8 High
- samsung smart thingsImproper access control vulnerabilities in Smart Things prior to 1.7.93 allows to attacker to...4.2 Medium
- samsung bixby visionImproper input validation in Bixby Vision prior to version 3.7.70.17 allows attacker to access...3.3 Low
- samsung android, samsung mobile devices +1 moreAn out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk...4.4 Medium
- samsung android, samsung mobile devices +1 moreImproper usage of implict intent in ePDG prior to SMR JAN-2023 Release 1 allows attacker to...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper input validation vulnerability in TelephonyUI prior to SMR Jan-2023 Release 1 allows...4.0 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to...5.4 Medium
- samsung android, samsung mobile devices +1 moreHardcoded AES key to encrypt cardemulation PINs in NFC prior to SMR Jan-2023 Release 1 allows...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1...4.3 Medium
- samsung android, samsung mobile devices +1 moreImproper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows...5.1 Medium
- samsung android, samsung mobile devices +1 moreImproper authorization vulnerability in semAddPublicDnsAddr in WifiSevice prior to SMR Jan-2023...5.7 Medium
- samsung android, samsung mobile devices +1 moreImproper Handling of Insufficient Permissions or Privileges vulnerability in...5.9 Medium
- samsung android, samsung mobile devices +1 moreUse of Externally-Controlled Format String vulnerabilities in STST TA prior to SMR Jan-2023...7.3 High
- google android, samsung mobile devices +1 moreAn improper implementation logic in Secure Folder prior to SMR Jan-2023 Release 1 allows the...4.3 Medium
- gpac, gpac gpac/gpac, debian linux +2 moreStack-based Buffer Overflow in gpac/gpac7.8 High
- gpac, gpac gpac/gpac +1 moreHeap-based Buffer Overflow in gpac/gpac7.3 High
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 morePrivilege Chaining in cockpit-hq/cockpit5.3 Medium
- orangescrumOrangeScrum version 2.0.11 allows an external attacker to obtain arbitrary user accounts from the...6.1 Medium
- huawei emui, harmonyos +1 moreThe AMS module has a vulnerability of lacking permission verification in APIs.Successful...7.5 High
- huawei emui, harmonyos +1 moreThe bundle management module lacks permission verification in some APIs. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe geofencing kernel code does not verify the length of the input data. Successful exploitation...7.5 High
- huawei emui, harmonyos +1 moreThe geofencing kernel code has a vulnerability of not verifying the length of the input data....7.5 High
- huawei emui, harmonyos +1 moreThe SystemUI has a vulnerability in permission management. Successful exploitation of this...5.3 Medium
- huawei emui, harmonyos +1 moreThe IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe IHwAttestationService interface has a defect in authentication. Successful exploitation of...7.5 High
- huawei emui, harmonyos +1 moreThe Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may...6.5 Medium
- huawei emui, harmonyos +1 moreThe Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this...6.5 Medium
- huawei harmonyosThe phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of...9.1 Critical
- huawei emui, harmonyos +1 moreThe bundle management module lacks authentication and control mechanisms in some APIs. Successful...7.5 High
- huawei emui, harmonyos +1 moreThe bundle management module lacks authentication and control mechanisms in some APIs. Successful...7.5 High
- huawei emui, harmonyos +1 moreThe HwContacts module has a logic bypass vulnerability. Successful exploitation of this...7.5 High
- huawei emui, harmonyos +1 moreThe multi-screen collaboration module has a privilege escalation vulnerability. Successful...7.5 High
- jitsiA command injection vulnerability exists in Jitsi before commit...9.8 Critical
- dahuasecurity ipc-hf5241f-ze firmware, ipc-hf5442f-ze firmware, ipc-hf5541f-ze firmware +94 more +96 moreSome Dahua embedded products have a vulnerability of unauthorized modification of the device...5.3 Medium
- pterodactyl wingsSymbolic Link (Symlink) Following allowing the deletion of files and directories on the host system in wings9.6 Critical
- delta electronics diascreenCVE-2023-02517.8 High
- Show moreLoading…