Lucene search
K

1826 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:51 a.m.3 views

SUSE CVE-2011-2980

Untrusted search path vulnerability in the ThinkPadSensor::Startup function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, allows local users to gain privileges by leveraging write access in an unspecified directory to place a Trojan horse DLL that is loaded into the running...

7.2CVSS6.9AI score0.00056EPSS
Exploits5References7
SUSE CVE
SUSE CVE
added 2023/02/15 5:37 a.m.1 views

SUSE CVE-2013-2898

drivers/hid/hid-sensor-hub.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDSENSORHUB is enabled, allows physically proximate attackers to obtain sensitive information from kernel memory via a crafted device...

1.9CVSS6.2AI score0.00063EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:41 a.m.1 views

SUSE CVE-2021-30585

Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.0061EPSS
Exploits0References4
Lenovo
Lenovo
added 2023/02/14 10:52 p.m.4 views

Intel Integrated Sensor Solution Advisory - Lenovo Support US

No description provided...

7.3AI score
Exploits0
Hewlett-Packard
Hewlett-Packard
added 2023/02/14 12:0 a.m.19 views

Intel® Integrated Sensor Solution February 2023 Security Update

Intel has informed HP of a potential security vulnerability in the Intel® Integrated Sensor Solution that might allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...

6CVSS6.9AI score0.00055EPSS
Exploits0Affected Software79
Intel
Intel
added 2023/02/14 12:0 a.m.40 views

Intel® Integrated Sensor Solution Advisory

Summary: A potential security vulnerability in the Intel® Integrated Sensor Solution may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-30339 Description: Out-of-bounds read in firmware for the IntelR...

6CVSS5.1AI score0.00055EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2023/02/03 12:0 a.m.4 views

PT-2025-54037

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a memory leak in the ov5675 init controls function within the media/i2c/ov5675.c file. This leak occurs when testing with a bpf mock device, specifically during...

7.8CVSS7AI score0.00249EPSS
Exploits2References905
OSV
OSV
added 2023/01/17 7:17 p.m.8 views

GSD-2023-1001446 HID: hid-sensor-custom: set fixed size for custom attributes

HID: hid-sensor-custom: set fixed size for custom attributes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2023/01/17 6:5 p.m.10 views

GSD-2023-1000738 HID: hid-sensor-custom: set fixed size for custom attributes

HID: hid-sensor-custom: set fixed size for custom attributes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

7.2AI score
Exploits0
Schneier on Security
Schneier on Security
added 2022/12/30 12:18 p.m.14 views

Recovering Smartphone Voice from the Accelerometer

Yet another smartphone side-channel attack: "EarSpy: Spying Caller Speech and Identity through Tiny Vibrations of Smartphone Ear Speakers": Abstract: Eavesdropping from the users smartphone is a well-known threat to the users safety and privacy. Existing studies show that loudspeaker reverberatio...

2.6AI score
Exploits0
OSV
OSV
added 2022/12/20 9:15 p.m.1 views

CVE-2022-46313

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone...

5.3CVSS5.8AI score0.00137EPSS
Exploits0References1
NVD
NVD
added 2022/12/20 9:15 p.m.11 views

CVE-2022-46313

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone...

5.3CVSS0.00137EPSS
Exploits0References1
Prion
Prion
added 2022/12/20 9:15 p.m.19 views

Authentication flaw

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone...

5CVSS5.5AI score0.00137EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/12/20 12:0 a.m.19 views

CVE-2022-46313

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone...

5.8AI score0.00137EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/20 12:0 a.m.2 views

PT-2022-27805 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The sensor privacy module has an authentication issue. If exploited, this could make the smartphone's camera and microphone unavailable. Recommendations: At the moment, there is no...

5.3CVSS5.3AI score0.00137EPSS
Exploits0References3
CVE
CVE
added 2022/12/20 12:0 a.m.64 views

CVE-2022-46313

The CVE-2022-46313 entry concerns Huawei HarmonyOS sensor privacy module. It is described as an authentication vulnerability that, if exploited, could render the device camera and microphone unavailable. The available metrics indicate a CVSS v3.1 base score of 5.3 (Medium) with network attack vec...

5.3CVSS5.5AI score0.00137EPSS
Exploits0References1Affected Software1
Sick AG
Sick AG
added 2022/12/08 4:0 p.m.6 views

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU6xx RADIO FREQUEN. SENSOR

SICK received a report about a vulnerability in the SICK RFU6XX RADIO FREQUEN. SENSOR. The used SSH service allowed for weak cipher suites to be used in traffic encryption. If weak cipher suites are used for traffic encryption, an attacker could potentially decrypt the traffic, which would affect...

4.2CVSS6.8AI score0.00108EPSS
Exploits0
Rapid7 Blog
Rapid7 Blog
added 2022/12/07 7:14 p.m.15 views

About Anomalous Data Transfer detection in InsightIDR

By Shivangi Pandey Shivangi is a Senior Product Manager for D&R at Rapid7. Data exfiltration is an unauthorized movement or transfer of data occurring on an organization’s network. This can occur when a malicious actor gains access to a corporation’s network with the intention of stealing or...

Exploits0
NVD
NVD
added 2022/12/06 7:15 a.m.12 views

CVE-2022-42756

In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel...

7.7CVSS0.00011EPSS
Exploits0References1
OSV
OSV
added 2022/12/06 7:15 a.m.1 views

CVE-2022-42756

In sensor driver, there is a possible buffer overflow due to a missing bounds check. This could lead to local denial of service in kernel...

5.5CVSS6AI score0.00011EPSS
Exploits0References1
Rows per page
Query Builder