CVE-2025-27523: Improper Restriction of XML External Entity Reference

XXE vulnerability in Hitachi JP1/IT Desktop Management 2 - Smart Device Manager on Windows.This issue affects JP1/IT Desktop Management 2 - Smart Device Manager: from 12-00 before 12-00-08, from 11-10 through 11-10-08, from 11-00 through 11-00-05, from 10-50 through 10-50-06...

CVE-2025-20164: Missing Authorization

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager DM of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this...

CVE-2022-43495

OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardwaredevicemanager when joining a network. Network attakcers can send an abonormal packet when joining a network, cause a nullptr reference and device reboot...

General Device Manager 2.5.2.2 Buffer Overflow

General Device Manager version 2.5.2.2 remote buffer overflow exploit that provides a reverse shell. Based on a discovery made in 2024 by Ahmet Ümit Bayram. ============================================================================================================================================...

Linux Distros Unpatched Vulnerability : CVE-2021-47410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix svmmigratefini warning Device manager releases device-specific resources whe...

GHSA-FGQ5-Q76C-GX78 vulnerabilities

Vulnerabilities for packages: yam, nri-apache, delve, esbuild, ferretdb, gitness, cadvisor, petname, amass, k8ssandra-operator, newrelic-prometheus-configurator, task, cni-plugins, oras, yq, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, ctop, kor, k3s, dive, nodetaint,...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: yam, nri-apache, delve, esbuild, ferretdb, gitness, cadvisor, petname, amass, k8ssandra-operator, newrelic-prometheus-configurator, task, cni-plugins, oras, yq, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, ctop, kor, k3s, dive, nodetaint,...

GHSA-679V-HH23-H5JH vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, configmap-reload-fips, metrics-server, smarter-device-manager-fips...

CVE-2023-5878

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2023-5878 OneWireless command injection possible when updating firmware

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

CVE-2023-5878

CVE-2023-5878 applies to Honeywell OneWireless Wireless Device Manager (WDM). Affected versions: R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, and R330.1. The vulnerability is a command injection that authenticated attackers can trigger via the firmware update process, leading to potential remo...

CVE-2023-5878: Improper Neutralization of Special Elements used in a Command

Honeywell OneWireless Wireless Device Manager WDM for the following versions R310.x, R320.x, R321.x, R322.1, R322.2, R323.x, R330.1 contains a command injection vulnerability. An attacker who is authenticated could use the firmware update process to potentially exploit the vulnerability, leading ...

Honeywell OneWireless Wireless Device Manager security vulnerability

Honeywell OneWireless Wireless Device Manager Honeywell OneWireless WDM is a wireless device manager from Honeywell USA. A security vulnerability exists in Honeywell OneWireless Wireless Device Manager. An attacker can exploit the vulnerability to inject commands. The following versions are...

ASB-A-370962373

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

GHSA-6WXM-MPQJ-6JPF vulnerabilities

Vulnerabilities for packages: opa-fips, crossplane-provider-gcp, step-ca, amass, sigstore-scaffolding-fips, nfs-subdir-external-provisioner-fips, step-issuer-fips, spark-operator, flux-image-reflector-controller, kubeflow-fips, sigstore-scaffolding, kyverno, kubeflow, portieris, step-fips,...

CVE-2024-49732

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-49732

A missing permission check in multiple functions of CompanionDeviceManagerService.java within the Android CompanionDeviceManagerService allows for a local escalation of privilege . An attacker can grant permissions without user consent and without requiring additional execution privileges. Exploi...

CVE-2024-8355

Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Visteon Infotainment system. Authentication is not required to exploit this vulnerability. The...

Visteon Infotainment SQL injection vulnerability

Visteon Infotainment is an automotive infotainment system from Visteon Corporation. Visteon Infotainment suffers from a SQL injection vulnerability that stems from improper validation of user-supplied strings when DeviceManager parses iAP serial numbers, which could lead to an attacker executing...

Hewlett Packard Enterprise Athonet vEPC MME security vulnerability

Hewlett Packard Enterprise Athonet vEPC MME HPE Athonet vEPC MME is a device management system from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Athonet vEPC MME version 11.4.0, which stems from the presence of an invalid memory access condition th...