458 matches found
WordPress Nearby Now Reviews plugin <= 5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Gilang - DJ in WordPress Plugin Nearby Now Reviews versions = 5.2...
CVE-2026-21635
The CVE-2026-21635 issue affects Ubiquiti EV Station Lite (v1.5.2 and earlier). It is caused by improper access control that could let a malicious actor within Wi‑Fi range exploit the WiFi AutoLink feature on a device adopted via Ethernet, exposing confidentiality (high) with no impact to integri...
EUVD-2026-0842
WHILL Model C2 Electric Wheelchairs and Model F Power Chairs do not enforce authentication for Bluetooth connections. An attacker within range can pair with the device and issue movement commands, override speed restrictions, and manipulate configuration profiles without any credentials or user...
CVE-2025-65824
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air OTA firmware upgrade using Bluetooth Low Energy BLE, resulting in the firmware on the device being overwritten with the attacker's code. As the device does not perform checks on upgrades,...
CVE-2025-65824
An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air OTA firmware upgrade using Bluetooth Low Energy BLE, resulting in the firmware on the device being overwritten with the attacker's code. As the device does not perform checks on upgrades,...
EUVD-2025-200258
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board...
CVE-2025-59698
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...
Entrust nShield Connect XC 安全漏洞
Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker with elevated privileges can read and write the contents of an unencrypted Appliance SSD...
Entrust nShield Connect XC 安全漏洞
Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from physical proximity where an attacker can boot from a USB device to elevate privileges...
PT-2025-48694
Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...
CVE-2025-43374
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.7, iOS 18.5 and iPadOS 18.5, visionOS 2.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, macOS Sequoia 15.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds rea...
EUVD-2025-76209
Malicious code in nearbyslug-strongdev npm...
EUVD-2025-78735
Malicious code in nearbyparakeetz3n npm...
EUVD-2025-78734
Malicious code in nearbyspoonbillz3n npm...
EUVD-2025-81120
Malicious code in nearbyxerinae0xrequest npm...
EUVD-2025-81122
Malicious code in nearbyharrier0xrequest npm...
Malicious code in nearby_xerinae_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12e9844976280ff51c48746419a444d4838721a93e6cc8d4273aa6af7adcb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nearby_quail_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e323da9c72ebff1981726241b720136d38d9644c4140bdc155465e3ee147e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...