VARIoT IoT vulnerabilities database

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the Asp_SetTimingtimeWifiAndLed parameter at /goform/aspForm. H3C of magic r100 An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. H3C Magic R100 is a router from H3C company. No detailed vulnerability details are currently provided

H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the UpdateWanParams parameter at /goform/aspForm. H3C of magic r100 An out-of-bounds write vulnerability exists in firmware.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. H3C Magic R100 is a router from H3C company. H3C Magic R100 has a buffer overflow vulnerability, which can be exploited by a remote attacker to submit a special request to crash the application or execute arbitrary code in the context of the application

Improper validation vulnerability in KfaOptions prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Google of Android There is an input validation vulnerability in.Information may be obtained and information may be tampered with. Samsung KfaOptions is a system component of Samsung mobile devices. There is a privilege escalation vulnerability in Samsung KfaOptions, which stems from the lack of correct validation logic in KfaOptions

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. Google of Android There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Samsung mobile devices are a series of mobile products of the South Korean company Samsung (Samsung)

Improper validation vulnerability in RemoteViews prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Google of Android There is an input validation vulnerability in.Information may be obtained and information may be tampered with. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. A privilege escalation vulnerability exists in Samsung mobile RemoteViews that stems from incorrect authentication in RemoteViews

Information exposure vulnerability in ScanPool prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. An information disclosure vulnerability exists in Samsung mobile ScanPool, which arises from a misconfiguration of the network system or product during operation

Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access toast message information from device. Google of Android Exists in a vulnerability in handling exceptional conditions.Information may be obtained. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. An information disclosure vulnerability exists in Samsung mobile DisplayToast

Information exposure vulnerability in SemIWCMonitor prior to SMR Jun-2022 Release 1 allows local attackers to get MAC address information. Google of Android Exists in a vulnerability related to the leakage of resources to the wrong area.Information may be obtained. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. An information disclosure vulnerability exists in Samsung mobile SemIWCMonitor, which is caused by a misconfiguration of the network system or product during operation

Unprotected component vulnerability in DeviceSearchTrampoline in SecSettingsIntelligence prior to SMR Jun-2022 Release 1 allows local attackers to launch activities of SecSettingsIntelligence. Samsung mobile is a mobile phone produced by the South Korean company Samsung. There is an unprotected component vulnerability in Samsung mobile SecSettingsIntelligence. The vulnerability is caused by the existence of unprotected components in DeviceSearchTrampoline

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent. Samsung's Android for SmartThings There is a vulnerability in improper default permissions.Information may be obtained. SmartThings is a powerful Samsung smart home mobile app. There is a PendingIntent hijacking vulnerability in Samsung SmartThings versions prior to 1.7.85.25

Improper access control vulnerability in DofViewer prior to SMR Jun-2022 Release 1 allows attackers to control floating system alert window. Google of Android Exists in unspecified vulnerabilities.Information may be tampered with. Samsung mobile is a mobile phone of South Korea's Samsung (Samsung) company. Samsung mobile DofViewer has an access control error vulnerability

Improper input validation check logic vulnerability in libsmkvextractor prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. Google of Android There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Samsung mobile is a mobile phone produced by the South Korean company Samsung. An attacker can exploit this vulnerability to cause a denial of service

Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device. Google of Android Exists in a vulnerability in handling exceptional conditions.Information may be obtained. Samsung mobile Bluetooth is a Bluetooth device on Samsung mobile phones. There is an information disclosure vulnerability in Samsung mobile Bluetooth. address

Sensitive information exposure in Sign-out log in Samsung Account prior to version 13.2.00.6 allows attackers to get an user email or phone number without permission. Samsung Account is a comprehensive free membership for Samsung mobile devices, Samsung services available on smartphones, tablets, websites, TVs and other devices. Attackers can exploit this vulnerability to obtain user emails or phone numbers

Improper input validation check logic vulnerability in SECRIL prior to SMR Jun-2022 Release 1 allows attackers to trigger crash. Google of Android There is an input validation vulnerability in.Service operation interruption (DoS) It may be in a state. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea. An attacker could exploit this vulnerability to trigger a crash

Sensitive information exposure in low-battery dumpstate log prior to SMR Jun-2022 Release 1 allows local attackers to get SIM card information. Google of Android Exists in a vulnerability related to the leakage of resources to the wrong area.Information may be obtained. Samsung mobile is a mobile phone from Samsung (Samsung) in South Korea

An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the listed products and some external peers

Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device. Google of Android Exists in a vulnerability in handling exceptional conditions.Information may be obtained. Samsung mobile Bluetooth is a Bluetooth device on Samsung mobile phones. Samsung mobile Bluetooth has an information disclosure vulnerability

Improper validation vulnerability in LSOItemData prior to SMR Jun-2022 Release 1 allows attackers to launch certain activities. Google of Android There is an input validation vulnerability in.Information may be obtained and information may be tampered with. Samsung LSOItemData is a system component of Samsung mobile devices. An elevation of privilege vulnerability exists in Samsung LSOItemData