Vulnerabilities > Low

DATE CVE VULNERABILITY TITLE RISK
2021-03-04 CVE-2021-25348 Unspecified vulnerability in Samsung Internet
Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission.
low complexity
samsung
2.4
2021-03-04 CVE-2021-25343 Improper Authentication vulnerability in Samsung Members 2.4.81.13/2.4.85.11
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.
local
low complexity
samsung CWE-287
3.3
2021-03-04 CVE-2021-25342 Improper Authentication vulnerability in Samsung Members 2.4.81.13/2.4.85.11
Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.
local
low complexity
samsung CWE-287
3.3
2021-03-04 CVE-2021-25341 Improper Authentication vulnerability in Samsung S Assistant
Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.
local
low complexity
samsung CWE-287
3.3
2021-03-04 CVE-2021-25340 Unspecified vulnerability in Google Android 10.0
Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State.
low complexity
google
2.4
2021-03-04 CVE-2021-26988 Missing Authorization vulnerability in Netapp Data Ontap
Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs.
low complexity
netapp CWE-862
3.5
2021-03-04 CVE-2021-25336 Unspecified vulnerability in Google Android 10.0/9.0
Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent.
local
low complexity
google
3.3
2021-03-04 CVE-2021-25335 Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to access hidden notification contents over the lockscreen in specific condition.
local
high complexity
google samsung
2.5
2021-03-04 CVE-2021-25333 Information Exposure vulnerability in Samsung PAY Mini
Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code.
low complexity
samsung CWE-200
2.4
2021-03-04 CVE-2021-25332 Information Exposure vulnerability in Samsung PAY Mini
Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition.
low complexity
samsung CWE-200
2.4