VARIoT IoT vulnerabilities database

Improper validation vulnerability in FeedsInfo prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Google of Android There is an input validation vulnerability in.Information may be obtained and information may be tampered with. Samsung FeedsInfo is a system component of Samsung mobile devices. An elevation of privilege vulnerability exists in Samsung FeedsInfo

Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of SecSettingsIntelligence. Samsung mobile is a mobile phone produced by the South Korean company Samsung. There is an unprotected component vulnerability in Samsung mobile SecSettingsIntelligence. The vulnerability is caused by the existence of unprotected components in DeviceSearchTrampoline

Improper caller check in AR Emoji prior to SMR Jun-2022 Release 1 allows untrusted applications to use some camera functions via deeplink. Google of Android Exists in unspecified vulnerabilities.Information may be tampered with. Samsung mobile is a mobile phone of South Korea's Samsung (Samsung) company. Samsung mobile AR Emoji has a design flaw

Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account. Google of Android Exists in unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Samsung Account is a mobile account feature for Samsung mobile devices

Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Google of Android There is an input validation vulnerability in.Information may be obtained and information may be tampered with. Samsung LSOItemData is a system component of Samsung mobile devices. An elevation of privilege vulnerability exists in Samsung LSOItemData

Improper Input Validation vulnerability in a particular configuration setting field of Hitachi Energy TXpert Hub CoreTec 4 product, allows an attacker with access to an authorized user with ADMIN or ENGINEER role rights to inject an OS command that is executed by the system. This issue affects: Hitachi Energy TXpert Hub CoreTec 4 version 2.0.0; 2.0.1; 2.1.0; 2.1.1; 2.1.2; 2.1.3; 2.2.0; 2.2.1

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device. Google of Android Exists in a vulnerability in handling exceptional conditions.Information may be obtained. Samsung mobile Bluetooth is a Bluetooth device on Samsung mobile phones. There is an information disclosure vulnerability in Samsung mobile Bluetooth

Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. Google of Android Exists in a vulnerability related to the leakage of resources to the wrong area.Information may be obtained. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. An information disclosure vulnerability exists in Samsung mobile SemIWCMonitor, which is caused by a misconfiguration of the network system or product during operation

A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. minmax for, SQL There is an injection vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. MINMAX is a high power density 10W DC-DC converter for space critical applications from MINMAX Corporation of China

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Google of Android There is an input validation vulnerability in.Information may be obtained and information may be tampered with. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. A privilege escalation vulnerability exists in Samsung mobile RemoteViews that stems from incorrect authentication in RemoteViews

Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. An information disclosure vulnerability exists in Samsung mobile ScanPool, which arises from a misconfiguration of the network system or product during operation

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. Google of Android There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Samsung mobile devices are a series of mobile products of the South Korean company Samsung (Samsung)

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. Google of Android There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Samsung mobile is a mobile phone of South Korea's Samsung (Samsung) company

In apusys driver, there is a possible system crash due to an integer overflow. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06477946; Issue ID: ALPS06477946. Google of Android Exists in an integer overflow vulnerability.Service operation interruption (DoS) It may be in a state. MediaTek Inc. is the world's fourth-largest foundry semiconductor company. It is in a leading position in the markets of mobile terminals, smart home applications, wireless connection technology and Internet of Things products, with approximately 1.5 billion units a year End products with built-in MediaTek chips are available all over the world. The vulnerability is caused by the fact that the apusys driver does not properly verify data boundaries when performing operations on memory

An out-of-bounds write can occur due to an incorrect input check in the camera driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

In WIFI Firmware, there is a possible memory corruption due to a use after free. This could lead to remote escalation of privilege, when devices are connecting to the attacker-controllable Wi-Fi hotspot, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06468872; Issue ID: ALPS06468872. Google of Android Exists in a vulnerability related to the use of freed memory.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Potential out of Bounds read in FIPS event processing due to improper validation of the length from the firmware in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with version RELEASE.2022-06-02T02-11-04Z, MinIO is vulnerable to an unending go-routine buildup while keeping connections established due to HTTP clients not closing the connections. Public-facing MinIO deployments are most affected. Users should upgrade to RELEASE.2022-06-02T02-11-04Z to receive a patch. One possible workaround is to use a reverse proxy to limit the number of connections being attempted in front of MinIO, and actively rejecting connections from such malicious clients. Minio Inc. of Minio Exists in a resource exhaustion vulnerability.Service operation interruption (DoS) It may be in a state

There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. (Vulnerability ID: HWPSIRT-2022-87185) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32204. Huawei of cv81-wdm There are unspecified vulnerabilities in the firmware.Service operation interruption (DoS) It may be in a state. Huawei CV81-WDM FW is a laser multifunction printer produced by Huawei, China. There is a security vulnerability in Huawei CV81-WDM FW 01.70.49.29.46