1621
|
7.1 |
HIGH
Local
|
samsung
|
android
|
Improper input validation in Settings Suggestions prior to SMR Nov-2024 Release 1 allows local attackers to launch privileged activities.
|
NVD-CWE-noinfo
|
CVE-2024-49401
|
2024-11-13 01:10 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1622
|
7.1 |
HIGH
Local
|
samsung
|
android
|
Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege.
|
CWE-276
Incorrect Default Permissions
|
CVE-2024-34679
|
2024-11-13 01:09 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1623
|
4.6 |
MEDIUM
Physics
|
samsung
|
android
|
Improper access control in Dex Mode prior to SMR Nov-2024 Release 1 allows physical attackers to temporarily access to unlocked screen.
|
NVD-CWE-noinfo
|
CVE-2024-34675
|
2024-11-13 01:08 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1624
|
4.6 |
MEDIUM
Physics
|
samsung
|
android
|
Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles.
|
NVD-CWE-noinfo
|
CVE-2024-34674
|
2024-11-13 01:08 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1625
|
3.3 |
LOW
Local
|
samsung
|
android
|
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate.
|
CWE-922
Insecure Storage of Sensitive Information
|
CVE-2024-34677
|
2024-11-13 01:07 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1626
|
5.5 |
MEDIUM
Local
|
samsung
|
android
|
Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information.
|
NVD-CWE-Other
|
CVE-2024-34680
|
2024-11-13 01:04 |
2024-11-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1627
|
- |
|
-
|
-
|
Improper Privilege Management vulnerability in Nomysoft Informatics Nomysem allows Collect Data as Provided by Users.This issue affects Nomysem: before 13.10.2024.
|
CWE-269
Improper Privilege Management
|
CVE-2024-8074
|
2024-11-13 00:48 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1628
|
- |
|
-
|
-
|
The NVMe driver queue processing is vulernable to guest-induced infinite loops.
|
-
|
CVE-2024-51566
|
2024-11-13 00:48 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1629
|
- |
|
-
|
-
|
The hda driver is vulnerable to a buffer over-read from a guest-controlled value.
|
-
|
CVE-2024-51565
|
2024-11-13 00:48 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1630
|
- |
|
-
|
-
|
A guest can trigger an infinite loop in the hda audio driver.
|
-
|
CVE-2024-51564
|
2024-11-13 00:48 |
2024-11-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|