Lucene search
K

38 matches found

NVD
NVD
added 2026/06/12 9:16 a.m.13 views

CVE-2026-11535

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device...

9.4CVSS0.00151EPSS
Exploits0References1
EUVD
EUVD
added 2026/06/12 8:0 a.m.6 views

EUVD-2026-36391

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device...

9.4CVSS5.3AI score0.00151EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/12 8:0 a.m.28 views

CVE-2026-11535

An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be exploited by attackers to Unauthorized access to the victim’s device...

9.4CVSS0.00151EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/06/12 12:0 a.m.8 views

PT-2026-48835

The authentication mechanism of a certain function in the PcSuite has a defect, which may result in information leakage within the range of a Bluetooth connection...

8.7CVSS5.3AI score0.00151EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/16 12:0 a.m.24 views

CVE-2026-37100

An issue in the Bluetooth Low Energy BLE control interface of the Yamaha SR-B30A sound bar firmware 2.40 Mobile App: Sound Bar Remote / version: 2.40 allows remote attackers within BLE radio range to connect without authentication via the Sound Bar Remote protocol...

0.00266EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/05 10:0 p.m.1 views

CVE-2026-4272

Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 BaseIngenic x1000 before GK000432BAA, from D1 BaseIngenic x1600 before HE000085BAA, from A1/B1 BaseIMX25 before...

8.1CVSS6AI score0.00453EPSS
Exploits0References2
NVD
NVD
added 2025/12/10 1:16 p.m.3 views

CVE-2024-2105

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS0.00177EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/10 1:1 p.m.25 views

CVE-2024-2105 JBL: Improper validation of ICM field in connection requests

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS0.00177EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/10 1:1 p.m.4 views

EUVD-2024-27069

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS6.4AI score0.00177EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/10 1:1 p.m.4 views

CVE-2024-2105 JBL: Improper validation of ICM field in connection requests

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS6.5AI score0.00177EPSS
Exploits0References2
CVE
CVE
added 2025/12/10 1:1 p.m.16 views

CVE-2024-2105

CVE-2024-2105 concerns JBL Bluetooth audio devices where an unauthorised nearby attacker can trigger a deadlock during BLE connection requests due to improper validation of the ICM field. Related records reference JBL products but do not disclose exact affected versions, exploit details, or remed...

6.5CVSS6.5AI score0.00177EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/10 12:0 a.m.6 views

PT-2025-50324

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

6.5CVSS6.9AI score0.00177EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-26393

Malicious code in bioql PyPI...

7.4CVSS6.6AI score0.0023EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/04 8:14 a.m.2 views

CVE-2025-41690

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive...

7.4CVSS6.7AI score0.0023EPSS
Exploits0References1
NVD
NVD
added 2025/09/02 8:15 a.m.1 views

CVE-2025-41690

A low-privileged attacker in bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This vulnerability could allow the Operator to authenticate as the Maintenance user, thereby gaining unauthorized access to sensitive...

7.4CVSS0.0023EPSS
Exploits0References1
CVE
CVE
added 2025/09/02 8:12 a.m.16 views

CVE-2025-41690

Endress+Hauser Proline 10 maintenance credentials exposure via Bluetooth: a low-privilege attacker within Bluetooth range can view the device event log and access the Maintenance password, enabling authentication as Maintenance and unauthorized access to configuration settings. Documented impact ...

7.4CVSS6.2AI score0.0023EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.4 views

PT-2025-35545

Name of the Vulnerable Software and Affected Versions: Endress+Hauser Promag 10 versions affected versions not specified Description: A low-privileged attacker within Bluetooth range may be able to access the password of a higher-privilege user Maintenance by viewing the device’s event log. This...

7.4CVSS6AI score0.0023EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/09/02 12:0 a.m.4 views

PT-2025-35584

Name of the Vulnerable Software and Affected Versions: SunPower PVS6 affected versions not specified Description: The SunPower PVS6’s BluetoothLE interface is vulnerable due to the use of hardcoded encryption parameters and publicly accessible protocol details. An attacker within Bluetooth range...

9.4CVSS6.3AI score0.00164EPSS
Exploits0References10
OSV
OSV
added 2025/08/19 9:15 p.m.5 views

CVE-2025-55031

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability affects...

9.8CVSS5.8AI score0.00386EPSS
Exploits0References4
AlpineLinux
AlpineLinux
added 2025/08/19 9:15 p.m.4 views

CVE-2025-55031

Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. This vulnerability affects...

9.8CVSS6.7AI score0.00386EPSS
Exploits0References4
Rows per page
Query Builder