Silicon Labs Zigbee EmberZNet SDK 安全漏洞

Silicon Labs Zigbee EmberZNet SDK is a software development kit for developing Zigbee networks from Silicon Labs, Inc. A security vulnerability exists in the Silicon Labs Zigbee EmberZNet SDK that stems from high traffic resulting in a message delivery failure that could lead to a denial of servi...

CVE-2025-2329

In high traffic environments, a Silicon Labs OpenThread RCP see impacted versions fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service...

CVE-2025-3873

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...

CVE-2025-3873

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...

CVE-2025-2329

In high traffic environments, a Silicon Labs OpenThread RCP see impacted versions fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service...

CVE-2025-2329

In high traffic environments, a Silicon Labs OpenThread RCP see impacted versions fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service...

CVE-2025-2329 High traffic causes corrupt SPI packets in OpenThread leading to denial of service

In high traffic environments, a Silicon Labs OpenThread RCP see impacted versions fails to clear the SPI transmit buffer and may send a corrupt packet over SPI to its host, causing the host to reset the RCP which results in a denial of service...

CVE-2025-2329

CVE-2025-2329 affects Silicon Labs OpenThread RCP. In high-traffic environments, the SPI transmit buffer may not be cleared, potentially sending a corrupt SPI packet to the host and causing the host to reset the RCP, resulting in a denial of service. Connected sources confirm the issue and refere...

CVE-2025-3873 Buffer overflow in Si91x crypto APIs

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...

PT-2025-30882 · Silicon · Siwx91X

Name of the Vulnerable Software and Affected Versions: Silicon Labs SiWx91x versions prior to 3.4.0 Description: The APIs sl si91x aes, sl si91x gcm, sl si91x ccm, and sl si91x sha did not validate the size of the output buffer provided by the caller. This could result in data corruption on the...

PT-2025-30887 · Silicon · Openthread Rcp

Name of the Vulnerable Software and Affected Versions: Silicon Labs OpenThread RCP affected versions not specified Description: In high traffic environments, the RCP fails to clear the SPI transmit buffer, potentially sending a corrupt packet over SPI to its host. This can cause the host to reset...

Grafana Labs Integration URL Exposed to Viewers (CVE-2025-3415)

The version of Grafana Labs installed on the remote host is affected by a vulnerability as referenced in the CVE-2025-3415 advisory. - Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to...

Grafana Labs XSS (CVE-2025-6023)

The version of Grafana Labs installed on the remote host is affected by a vulnerability as referenced in the CVE-2025-6023 advisory. - An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5....

CVE-2025-0886

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges...

CVE-2025-0886

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges...

CVE-2025-0886

CVE-2025-0886 concerns an incorrect permissions vulnerability in Lenovo/ Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges. The available documents identify the affected component as the Elliptic Labs Virtual Lock Sensor and describe the root ca...

CVE-2025-0886

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges...

PT-2025-29955 · Elliptic · Elliptic Labs Virtual Lock Sensor

Name of the Vulnerable Software and Affected Versions: Elliptic Labs Virtual Lock Sensor affected versions not specified Description: An incorrect permissions vulnerability exists that could allow a local, authenticated user to escalate privileges. Recommendations: At the moment, there is no...

Lenovo Elliptic Labs Virtual Lock Sensor 安全漏洞

Lenovo Elliptic Labs Virtual Lock Sensor is a virtual lock sensor from the Chinese company Lenovo Lenovo. It can detect when a user is in front of a PC/laptop system. A security vulnerability exists in the Lenovo Elliptic Labs Virtual Lock Sensor, which stems from improper privilege assignment an...

CVE-2025-40985 SQL Injection in SCATI Vision Web

SQL injection vulnerability in SCATI Vision Web of SCATI Labs from version 4.8 to 7.2. This vulnerability allows an attacker to exfiltrate some data from the database via the ‘login’ parameter in the endpoint ‘/scatevisionweb/index.php/loginForm’...