Lucene search
K

232 matches found

OSV
OSV
added 2025/01/06 4:25 p.m.2 views

CVE-2025-21615 AAT allows data exfiltration by other apps installed on the same device

AAT Another Activity Tracker is a GPS-tracking application for tracking sportive activities, with emphasis on cycling. Versions lower than v1.26 of AAT are vulnerable to data exfiltration from malicious apps installed on the same device...

5.5CVSS6.9AI score0.00103EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.3 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in the updategpssv and outputgpssv sections of vendor/mediatek/proprietary/hardware/connectivity/gps/gpshal/src/gpshalwor A missing bounds check in updategpssv and...

6.7CVSS8.9AI score0.00035EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.3 views

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. A security vulnerability exists in Google Pixel that stems from a lack of boundary checking in m3326gpswrite and m3326gpsread in gps.s. An out-of-bounds read may exist...

5.5CVSS9.1AI score0.00031EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.2 views

PT-2024-10658 · Mediatek · Mediatek Gps Hal

Name of the Vulnerable Software and Affected Versions: Mediatek GPS HAL affected versions not specified Description: The issue is related to a possible out of bounds write in the update gps sv and output vzw debug functions of the gpshal worker.c file, due to a missing bounds check. This could le...

6.7CVSS6.7AI score0.00035EPSS
Exploits0References4
Securelist
Securelist
added 2024/11/13 10:0 a.m.8 views

Threats in space (or rather, on Earth): internet-exposed GNSS receivers

What is GNSS? Global Navigation Satellite Systems GNSS are collections, or constellations of satellite positioning systems. There are several GNSSs launched by different countries currently in operation: GPS US, GLONASS Russia, Galileo EU, BeiDou Navigation Satellite System BDS, China, Navigation...

8.4AI score
Exploits0
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.4 views

Traccar 安全漏洞

Traccar is a Java-based website builder that provides GPS tracking capabilities from Traccar, Inc. in the United States. The software supports more than 170 GPS protocols and more than 1500 models of GPS tracking devices.Traccar can be used with any major SQL database system. It also provides an...

9.8CVSS7.2AI score0.00327EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.3 views

One2Track 安全漏洞

One2Track is a GPS phone watch for children from One2Track. One2Track has a security vulnerability that stems from a missing PIN configuration...

6.2CVSS6.8AI score0.00026EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/07/05 12:0 a.m.1 views

The software for calculating positions of individual RTLS transponders in SIMATIC RTLS Locating Manager is vulnerable due to uncontrolled resource consumption. This vulnerability allows a intruder to cause a service failure.

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending...

5.3CVSS5.5AI score0.00527EPSS
Exploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/07/04 12:0 a.m.2 views

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the unlimited distribution of resources, which allows a intruder to trigger a service failure.

The vulnerability of the software for calculating the positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.8CVSS5.5AI score0.00493EPSS
Exploits0References2Affected Software7
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:30 p.m.2 views

Malicious code in brand-positioning-block (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSV
OSV
added 2024/06/25 12:30 p.m.4 views

MAL-2024-1839 Malicious code in brand-positioning-block (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OpenVAS
OpenVAS
added 2024/06/07 12:0 a.m.10 views

Fedora: Security Advisory for qt5-qtlocation (FEDORA-2024-2e27372d4c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS10AI score0.00483EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/06/07 12:0 a.m.7 views

Fedora: Security Advisory for qt6-qtpositioning (FEDORA-2024-bfb8617ba3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS10AI score0.00483EPSS
Exploits0References2
Fedora
Fedora
added 2024/06/05 1:41 a.m.12 views

[SECURITY] Fedora 40 Update: qt5-qtlocation-5.15.14-1.fc40

The Qt Location and Qt Positioning APIs gives developers the ability to determine a position by using a variety of possible sources, including satellite, or wifi, or text file, and so on...

9.8CVSS6.4AI score0.00483EPSS
Exploits0
Fedora
Fedora
added 2024/05/29 3:37 a.m.9 views

[SECURITY] Fedora 40 Update: qt6-qtpositioning-6.7.1-1.fc40

The Qt Positioning APIs gives developers the ability to determine a position by using a variety of possible sources, including satellite, or wifi, or text file, and so on...

9.8CVSS6.2AI score0.00483EPSS
Exploits0
Krebs on Security
Krebs on Security
added 2024/05/21 4:21 p.m.17 views

Why Your Wi-Fi Router Doubles as an Apple AirTag

Image: Shutterstock. Apple and the satellite-based broadband service Starlink each recently took steps to address new research into the potential security and privacy implications of how their services geo-locate devices. Researchers from the University of Maryland say they relied on publicly...

6.2AI score
Exploits0
CNVD
CNVD
added 2024/05/16 12:0 a.m.5 views

Siemens SIMATIC RTLS Locating Manager Resource Allocation Error Vulnerability

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A resource allocation error vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to the affected application faili...

7.1CVSS6.7AI score0.00493EPSS
Exploits0References1
CNVD
CNVD
added 2024/05/15 12:0 a.m.4 views

Siemens SIMATIC RTLS Locating Manager Sensitive Information Plaintext Transfer Vulnerability

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A plaintext transfer of sensitive information vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to the affected...

9.6CVSS6.2AI score0.00072EPSS
Exploits0References1
CNVD
CNVD
added 2024/05/15 12:0 a.m.5 views

Unspecified Vulnerability in Siemens SIMATIC RTLS Locating Manager

SIMATIC RTLS Locating Manager is used to configure, operate and maintain the SIMATIC RTLS unit, a real-time wireless positioning system that provides locating solutions. A security vulnerability exists in Siemens SIMATIC RTLS Locating Manager due to an affected SIMATIC RTLS Locating Manager clien...

8.8CVSS6.7AI score0.00804EPSS
Exploits0References1
Broadcom
Broadcom
added 2024/04/17 12:0 a.m.6 views

Multiple NTP vulnerabilities resolved (CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554, CVE-2023-26555)

CVE-2023-26551 mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able to attack a client ntpq process, but cannot attack ntpd. Base Score: 5.6 MEDIUM Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2023-26552 mstolfp in...

6.4CVSS7.1AI score0.00942EPSS
Exploits0
Rows per page
Query Builder