16589 matches found
CVE-2025-21060: Cleartext Storage of Sensitive Information
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...
Samsung Smart Switch security vulnerabilities
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing application backup data...
Samsung Smart Switch security vulnerabilities
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from the use of an insecure encryption algorithm that could lead to a local attacker replacing the recovery application...
Samsung Smart Switch security vulnerabilities
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing sensitive data...
Samsung Smart Switch security vulnerabilities
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.66.6, which stems from improper authentication and could lead to an adjacent attacker accessing the transferred data...
PT-2025-41522
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software utilizes a broken or risky cryptographic algorithm. This allows a local attacker to replace the restoring application, but requires user interaction to trigger the issue...
PT-2025-41524
Name of the Vulnerable Software and Affected Versions Samsung Smart Switch versions prior to 3.7.66.6 Description A flaw exists in the authentication process of Smart Switch that could allow nearby attackers to gain access to data during transfers. This authentication bypass enables unauthorized...
PT-2025-41521
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software stores sensitive information in cleartext, potentially allowing local attackers to access this data. User interaction is required to trigger this issue. The vulnerability affects...
CVE-2025-21062: Use of a Broken or Risky Cryptographic Algorithm
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...
PT-2025-41520
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description A flaw exists in Smart Switch that allows local attackers to access backup data from applications due to the cleartext storage of sensitive information. User interaction is required to trigge...
PT-2025-42712
Impact A memory safety vulnerability was present in the Fuel Virtual Machine FuelVM, where memory reads could bypass expected access controls. Specifically, when a smart contract performed a mload or other opcodes which access memory on memory that had been deallocated using ret, it was still abl...
CVE-2025-40885
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885
CVE-2025-40885 is an authenticated SQL Injection vulnerability in Nozomi Networks Guardian/CMC Smart Polling functionality caused by improper input validation. An authenticated user with limited privileges can cause the DBMS to execute arbitrary SELECT statements, potentially exposing data. Affec...
CVE-2025-40885 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
EUVD-2025-32866
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-59450
The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials...