22790 matches found
CVE-2025-21024
Samsung Smart View before Android 16 is affected by CVE-2025-21024 due to the use of implicit intents for sensitive communication, enabling local attackers to access sensitive information through the affected component. The issue is described across multiple sources as a vulnerability in Smart Vi...
CVE-2025-21010
CVE-2025-21010 affects SamsungAccount prior to SMR Aug-2025 Release 1. The root cause is improper privilege management that can allow a local attacker with high privileges to deactivate a Samsung account. Impact is feasible deactivation with local access; CVSS v3.1 vector: AV:L/AC:L/PR:H/UI:N/S:C...
CVE-2025-54883
Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 packaged in Vision-ui = 1.4.0 contains a critical cryptographic weakness. Due to a silent 32-bit...
VulnCheck KEV: CVE-2024-51978
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP...
Fedora: Security Advisory (FEDORA-2025-1d22f55c40)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory (FEDORA-2025-f7bc7b789f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-54883 Vision UI's security-kit Contains Cryptographic Weakness
Vision UI is a collection of enterprise-grade, dependency-free modules for modern web projects. In versions 1.4.0 and below, the getSecureRandomInt function in security-kit versions prior to 3.5.0 packaged in Vision-ui = 1.4.0 contains a critical cryptographic weakness. Due to a silent 32-bit...
CVE-2025-54883
Summary: CVE-2025-54883 affects Vision UI up to version 1.4.0, where the internal getSecureRandomInt in security-kit pre-3.5.0 uses a 32‑bit mask in rejection sampling that overflows, producing a non-uniform distribution of random numbers when the requested entropy exceeds 32 bits. The root cause...
HackerOne: DOS via Mutation Aliasing in GraphQL Account Recovery Phone Number Verification API
The GraphQL API's 'verifyAccountRecoveryPhoneNumber' mutation was found to be vulnerable to denial-of-service attacks through mutation aliasing. The vulnerability allowed multiple aliases of the same mutation to be included in a single request, causing the server to process each mutation...
CVE-2025-7050
creationtimestamp| type| source ---|---|--- 2025-08-05 11:28:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvnm4ti3sw2c...
CVE-2025-7376
creationtimestamp| type| source ---|---|--- 2025-08-05 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-217-01 2025-08-05 16:05:28+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvo3mbsmyg2z...
Lightweight Fault Detection Architecture for NTT on FPGA
Post-Quantum Cryptographic PQC algorithms are mathematically secure and resistant to quantum attacks but can still leak sensitive information in hardware implementations due to natural faults or intentional fault injections. The intent fault injection in side-channel attacks reduces the reliabili...
CVE-2025-8522
creationtimestamp| type| source ---|---|--- 2025-08-04 22:11:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvm7m2tjag26...
CLSA-2025-1754338597 Fix CVE(s): CVE-2025-6965
SECURITY UPDATE: excessive aggregate terms potentially leading to memory corruption - debian/patches/CVE-2025-6965.patch: fix a potential memory corruption if the number of aggregate terms in a query exceeds the maximum number of columns - CVE-2025-6965...
CVE-2025-36605
creationtimestamp| type| source ---|---|--- 2025-08-04 15:53:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlkhda2rs2k...
SUSE-SU-2025:02677-1 Security update for cairo
This update for cairo fixes the following issues: - CVE-2019-6461: avoid assert when drawing arcs with NaN angles bsc1122338...
CVE-2025-54386
creationtimestamp| type| source ---|---|--- 2025-08-02 01:48:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvf2cyuzbq2k 2026-02-05 21:40:13+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me5e47n7uc2g...
RHSA-2024:4367
creationtimestamp| type| source ---|---|--- 2025-08-01 19:46:22+00:00| seen| Telegram/O8FwmjqjKQMaQrdgMgHP9iBegxKxQxSENSkPsU2n4egHQc...
CVE-2025-8474 Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability
Alpine iLX-507 CarPlay Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Alpine iLX-507 devices. Authentication is not required to exploit this vulnerability. The specific flaw...