Lucene search
+L

343 matches found

RedhatCVE
RedhatCVE
•added 2025/05/07 3:05 a.m.•36 views

CVE-2025-20665

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760...

5.5CVSS6.5AI score0.00084EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/05 3:15 a.m.•35 views

CVE-2025-20665

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760...

5.5CVSS0.00084EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/05 2:49 a.m.•12 views

CVE-2025-20665

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760...

5.2AI score0.00084EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/05 2:49 a.m.•48 views

CVE-2025-20665

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760...

0.00084EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/05 2:49 a.m.•103 views

CVE-2025-20665

CVE-2025-20665 affects MediaTek chipsets’ devinfo component where a missing SELinux policy enables local information disclosure of the device identifier without additional privileges. Multiple sources corroborate the issue and reference patch ALPS09555228 / MSV-2760 from MediaTek’s bulletin. Impa...

5.5CVSS5.9AI score0.00084EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/05/05 12:00 a.m.•19 views

PT-2025-19329 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution...

5.5CVSS5.9AI score0.00084EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/05 12:00 a.m.•0 views

CVE-2025-20665: Insertion of Sensitive Information into Externally-Accessible File or Directory

In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760...

5.5CVSS5.8AI score0.00084EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/08 5:15 a.m.•13 views

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

5.4CVSS0.00192EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/08 5:15 a.m.•23 views

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

5.4CVSS5.8AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/08 4:49 a.m.•43 views

CVE-2025-20939

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices...

5.4CVSS0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•16 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2025 Release 1, which stems from improper authorization of the...

5.4CVSS6.2AI score0.00192EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•15 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Apr-2025 Release 1, which originates from a broadcast receiver that do...

4.4CVSS6.2AI score0.00135EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/02/06 12:00 a.m.•27 views

PT-2025-5848 · Forever · Forever Kidswatch Call Me 2 Kw60 +1

Name of the Vulnerable Software and Affected Versions: Forever KidsWatch Call Me KW50 R36 YDR A3PW GM7S V1.0 2019 07 15 16.19.24 cob h Forever KidsWatch Call Me 2 KW60 R36CW YDE S4 A29 2 V1.0 2023.05.24 22.49.44 cob b Description: The issue is related to the device ID being based on the IMEI. If ...

6.6CVSS7AI score0.00196EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/12/29 3:47 a.m.•5 views

SUSE CVE-2024-56704

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

5.5CVSS6.2AI score0.00243EPSS
SaveExploits0References21
OSV
OSV
•added 2024/12/28 10:15 a.m.•14 views

AZL-55466 CVE-2024-56704 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

7.8CVSS6.3AI score0.00243EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/28 10:15 a.m.•14 views

AZL-55457 CVE-2024-56704 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

7.8CVSS6.7AI score0.00243EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/28 9:46 a.m.•5 views

CVE-2024-56704 9p/xen: fix release of IRQ

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

8.4CVSS7.6AI score0.00243EPSS
SaveExploits0References9
RedHat Linux
RedHat Linux
•added 2024/10/15 12:42 a.m.•21 views

kernel: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered...

4.7CVSS6.3AI score0.00222EPSS
SaveExploits0References5
OSV
OSV
•added 2024/09/13 6:15 p.m.•11 views

CVE-2024-45104

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call...

6.5CVSS5.7AI score0.00202EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/13 6:15 p.m.•44 views

CVE-2024-45104

A valid, authenticated LXCA user without sufficient privileges may be able to use the device identifier to modify an LXCA managed device through a specially crafted web API call...

6.5CVSS0.00202EPSS
SaveExploits0References1
Rows per page
Query Builder