samsung members vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in webview.

Samsung Members Samsung Members 3.9.10.11

3.3

CVSSv3

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause arbitrary webpage loading in webview.

Samsung Members Samsung Members 3.9.10.11

3.3

CVSSv3

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local malicious users to access device identification via log.

Samsung Samsung Members

8.8

CVSSv3

This vulnerability allows remote malicious users to escalate privileges on vulnerable installations of Samsung Members Fixed in version 2.4.25. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Th...

Samsung Samsung Members

5.5

CVSSv3

Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows malicious user to launch arbitrary activity.

Samsung Members

3.3

CVSSv3

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.

Samsung Members

3.3

CVSSv3

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.

Samsung Members

7.5

CVSSv3

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote malicious users to access a user data related with Samsung Account.

Samsung Members

1 Github repository

3.3

CVSSv3

Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local malicious user to execute call function without CALL_PHONE permission.

Samsung Members

4.3

CVSSv3

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows malicious users to access sensitive information.

Samsung Members

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook