1074 matches found
CVE-2025-30198
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived...
CVE-2025-30198
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic WPA2-PSK, which can be easily derived...
CVE-2025-30200
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived...
CVE-2025-30200
ECOVACS robot vacuums and base stations are affected by CVE-2025-30200, where devices communicate over an insecure Wi‑Fi network and use a deterministic AES key that can be derived from the device serial number. The vulnerability is also described as allowing insecure firmware/over‑the‑air update...
CVE-2025-30200 ECOVACS Vacuum and Base Station Hard-Coded AES Encryption
ECOVACS robot vacuums and base stations communicate via an insecure Wi-Fi network with a deterministic AES encryption key, which can be easily derived...
Linux Distros Unpatched Vulnerability : CVE-2017-13099
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th...
Linux Distros Unpatched Vulnerability : CVE-2019-13445
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.c...
Linux Distros Unpatched Vulnerability : CVE-2024-39780
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A YAML deserialization vulnerability was found in the Robot Operating System ROS 'dynparam', a command- line tool for getting, setting, and deleting parameters ...
Linux Distros Unpatched Vulnerability : CVE-2020-10289
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of unsafe yaml load. Allows instantiation of arbitrary objects. The flaw itself is caused by an unsafe parsing of YAML values which happens whenever an acti...
Linux Distros Unpatched Vulnerability : CVE-2021-37146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An infinite loop in Open Robotics roscomm XMLRPC server in ROS Melodic through 1.4.11 and ROS Noetic through1.15.11 allows remote attackers to cause a Denial of...
Linux Distros Unpatched Vulnerability : CVE-2019-13566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. A buffer overflow allows attackers to cau...
Malicious code in microbit-robot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 77f4b228f14d3fee9b979e52a9e8e6966e3cc81cacd2d9aa2b1aaf00b96789fa The OpenSSF Package Analysis project identified 'microbit-robot' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41308 Malicious code in microbit-robot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 77f4b228f14d3fee9b979e52a9e8e6966e3cc81cacd2d9aa2b1aaf00b96789fa The OpenSSF Package Analysis project identified 'microbit-robot' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Linux Distros Unpatched Vulnerability : CVE-2024-39835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code injection vulnerability has been identified in the Robot Operating System ROS 'roslaunch' command-line tool, affecting ROS distributions Noetic Ninjemys...
MAL-2025-8348 Malicious code in @lbnqduy/solid-robot (npm)
The package @lbnqduy/solid-robot was found to contain malicious code...
MAL-2025-36126 Malicious code in test-mlw2-robot-turns (npm)
The package test-mlw2-robot-turns was found to contain malicious code...
Malicious code in @scdb/curly-robot (npm)
The package @scdb/curly-robot was found to contain malicious code...
Malicious code in vma-robot (npm)
The package vma-robot was found to contain malicious code...