223 matches found
CVE-2025-47419
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from...
CVE-2025-47419
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from...
CVE-2025-47419 Non-Secure Access
Cleartext Transmission of Sensitive Information vulnerability in Crestron Automate VX allows Sniffing Network Traffic. The device allows Web UI and API access over non-secure network ports which exposes sensitive information such as user passwords. This issue affects Automate VX: from...
CVE-2025-47419
Crestron Automate VX contains a vulnerability (CVE-2025-47419) where Web UI and API access over non-secure ports allows cleartext transmission of sensitive information, including passwords. Affected firmware ranges are 5.6.8161.21536 through 6.4.0.49. The issue originates from transmitting sensit...
Crestron Automate VX 安全漏洞
Crestron Automate VX is an enterprise-grade intelligent space automation platform with integrated AV control, IoT device management, and data analytics from Crestron USA. A security vulnerability exists in Crestron Automate VX versions 5.6.8161.21536 through 6.4.0.49 that originates from the...
CVE-2024-57868
Web::API 2.8 and earlier for Perl uses the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Web::API uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random...
Huawei EulerOS: Security Advisory for llvm (EulerOS-SA-2025-1336)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-27551
CVE-2025-27551 affects DBIx::Class::EncodedColumn (Digest.pm) up to version 0.00032. The issue stems from salting password hashes with the non-cryptographically secure rand() function. Impact is described as: local attack vector and limited scope of exploitability within affected module until 0.0...
Mozilla Firefox for iOS Spoofing Vulnerability
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox for iOS suffers from a spoofing vulnerability caused by an error when accessing a non-secure HTTP site that uses a non-existent port. An attacker can use this vulnerability to make the...
CVE-2024-53975
Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS 133...
CVE-2024-53975
Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS 133...
PT-2024-35989 · Mozilla · Firefox
Name of the Vulnerable Software and Affected Versions: Firefox for iOS versions prior to 133 Description: Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to appear secure misleadingly. Recommendations: For Firefox for iOS...
CVE-2024-7883
When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...
DEBIAN-CVE-2024-7883
When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...
CVE-2024-7883 CMSE secure state may leak from stack to floating-point registers
When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...
CVE-2024-7883
When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secure function call is made that returns a floating-point value and when this is the first use of floating-point since entering Secure state...
CVE-2024-41024
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Restrict untrusted app to attach to privileged PD Untrusted application with access to only non-secure fastrpc device node can attach to rootpd or static PDs if it can make the respective init request. This can cau...
CVE-2024-41024
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2024-29204 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue allows an untrusted application with access to only a non-secure fastrpc device node to attach to root pd or static PDs if it can make the respective init request. This can...