Lucene search
+L

115 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:15 a.m.11 views

CVE-2021-0382

In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...

5.5CVSS6.2AI score0.00114EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/01/02 6:30 p.m.2 views

EUVD-2026-0382

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
SaveExploits0References1
EUVD
EUVD
added 2025/10/06 9:30 p.m.10 views

EUVD-2025-32580

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials...

4.3CVSS6.4AI score0.00103EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/06 9:30 p.m.17 views

EUVD-2025-32583

Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...

4.7CVSS6.1AI score0.00173EPSS
SaveExploits0References4
NVD
NVD
added 2025/10/06 8:15 p.m.13 views

CVE-2025-59450

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials...

4.3CVSS0.00103EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/06 12:00 a.m.11 views

YoSmart YoLink Smart Hub 安全漏洞

YoSmart YoLink Smart Hub is a smart home hub device from YoSmart USA. A security vulnerability exists in YoSmart YoLink Smart Hub version 0382, which stems from unencrypted firmware and could lead to the disclosure of network access credentials...

4.3CVSS6.5AI score0.00103EPSS
SaveExploits0References3
CVE
CVE
added 2025/10/06 12:00 a.m.25 views

CVE-2025-59448

CVE-2025-59448 concerns the YoSmart YoLink ecosystem, where components including the YoLink Hub 0382, YoLink Mobile Application 1.40.41, and YoLink MQTT Broker communicate over the internet using unencrypted MQTT. The vulnerability arises from insecure transmission, allowing an attacker who can m...

4.7CVSS6.3AI score0.00173EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/06 12:00 a.m.18 views

CVE-2025-59450

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials...

4.3CVSS0.00103EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/06 12:00 a.m.6 views

CVE-2025-59447

The YoSmart YoLink Smart Hub device 0382 exposes a UART debug interface. An attacker with direct physical access can leverage this interface to read a boot log, which includes network access credentials...

2.2CVSS6.1AI score0.00168EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/10/06 12:00 a.m.18 views

PT-2025-40947

Name of the Vulnerable Software and Affected Versions YoSmart YoLink Smart Hub firmware version 0382 Description The YoSmart YoLink Smart Hub firmware version 0382 is unencrypted. Data extracted from the device can be used to determine network access credentials. Recommendations At the moment,...

4.3CVSS6.4AI score0.00103EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/10/06 12:00 a.m.4 views

CVE-2025-59450

The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials...

4.3CVSS6.5AI score0.00103EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/10/06 12:00 a.m.8 views

YoSmart YoLink Smart Hub 安全漏洞

The YoSmart YoLink Smart Hub is a smart home hub device from YoSmart USA. A security vulnerability exists in the YoSmart YoLink Smart Hub version 0382, which stems from exposing the UART debugging interface and could lead to the disclosure of network access credentials...

2.2CVSS6.5AI score0.00168EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/10/06 12:00 a.m.6 views

CVE-2025-59448

Components of the YoSmart YoLink ecosystem through 2025-10-02 leverage unencrypted MQTT to communicate over the internet. An attacker with the ability to monitor network traffic could therefore obtain sensitive information or tamper with the traffic to control affected devices. This affects YoLin...

4.7CVSS6.3AI score0.00173EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/06 12:00 a.m.18 views

CVE-2025-59450

The CVE-2025-59450 entry concerns YoSmart YoLink Smart Hub firmware 0382 (unencrypted). The documented impact is that data extracted from the device could be used to determine network access credentials, exposing confidentiality. No exploitation details are provided in the supplied documents. Rem...

4.3CVSS6.5AI score0.00103EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/08/05 12:00 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-0382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or...

5.5CVSS6.5AI score0.00385EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/05/23 9:33 a.m.13 views

CVE-2024-0382

The WP Recipe Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 9.1.0 due to unrestricted use of the 'headertag' attribute. This makes it possible for authenticated attackers with contributor-level and above...

6.4CVSS5.8AI score0.00561EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:04 a.m.11 views

CVE-2019-0382

A Cross-Site Scripting vulnerability exists in SAP BusinessObjects Business Intelligence Platform Web Intelligence-Publication related pages; corrected in version 4.2. Privileges are required in order to exploit this vulnerability...

5.4CVSS6.3AI score0.00526EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 9:12 p.m.16 views

CVE-2009-0382

Unspecified vulnerability in Internationalization i18n Translation 5.x before 5.x-2.5, a module for Drupal, allows remote attackers with "translate node" permissions to bypass intended access restrictions and read unpublished nodes via unspecified vectors...

4.3CVSS7.1AI score0.01105EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/12/02 12:00 a.m.13 views

Mageia: Security Advisory (MGASA-2024-0382)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.4CVSS7.1AI score0.00926EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
added 2024/07/24 12:00 a.m.16 views

Photon OS 3.0: Xz PHSA-2022-3.0-0382

An update of the xz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0382. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid204617...

8.8CVSS6.6AI score0.04291EPSS
SaveExploits0References2
Rows per page
Query Builder