Lucene search
+L

14 matches found

RedhatCVE
RedhatCVE
•added 2026/03/09 8:02 a.m.•13 views

CVE-2026-3669

A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may ...

5.3CVSS5.2AI score0.00145EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/07 7:15 p.m.•15 views

CVE-2026-3669

A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may ...

5.3CVSS0.00145EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/07 6:32 p.m.•5 views

CVE-2026-3669 Freedom Factory dGEN1 com.dgen.alarm AlarmService improper authorization

A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may ...

5.3CVSS5.5AI score0.00145EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/07 12:00 a.m.•1 views

CVE-2026-3669: Improper Authorization

A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may ...

5.3CVSS4.9AI score0.00145EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/07 12:00 a.m.•23 views

PT-2026-23880

A security vulnerability has been detected in Freedom Factory dGEN1 up to 20260221. This impacts the function AlarmService of the component com.dgen.alarm. Such manipulation leads to improper authorization. The attack needs to be performed locally. The exploit has been disclosed publicly and may ...

5.3CVSS5.2AI score0.00145EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/03/07 12:00 a.m.•18 views

Freedom Factory dGEN1 授权问题漏洞

The Freedom Factory dGEN1 is a Ethereum mobile device produced by the Freedom Factory company. Versions of the Freedom Factory dGEN1 dated 20260221 and earlier have a licensing issue vulnerability. This vulnerability stems from incorrect operations on the AlarmService function in the com.dgen.ala...

5.3CVSS6.1AI score0.00145EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-11837

Malware in sbrugna...

4.3CVSS4.2AI score0.00519EPSS
SaveExploits0References3
OSV
OSV
•added 2017/11/22 7:29 p.m.•14 views

CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

3.3CVSS5.7AI score0.00519EPSS
SaveExploits0References2
Prion
Prion
•added 2017/11/22 7:29 p.m.•19 views

Code injection

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

4.3CVSS3.9AI score0.00519EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2017/11/22 7:29 p.m.•30 views

CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

4.3CVSS3.8AI score0.00519EPSS
SaveExploits0References2
CVE
CVE
•added 2017/11/22 7:00 p.m.•62 views

CVE-2017-2694

The CVE-2017-2694 issue affects Huawei HwVmall’s AlarmService prior to version 1.5.2.0. Root cause: AlarmService does not enforce invocation permissions, allowing any third‑party app to call it. Impact: an attacker could trigger alert music unexpectedly, degrading user experience. Evidence in mul...

4.3CVSS4AI score0.00519EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2017/11/22 7:00 p.m.•35 views

CVE-2017-2694

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

3.8AI score0.00519EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/22 12:00 a.m.•4 views

CVE-2017-2694: Undefined Security Weakness

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

4.3CVSS5.3AI score0.00519EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/02/10 12:00 a.m.•18 views

Huawei HwVmall Local Security Bypass Vulnerability

Huawei HwVmall is a set of e-commerce platform for national service. A security vulnerability exists in the AlarmService service component in Huawei HwVmall versions prior to 1.5.2.0. The vulnerability stems from the fact that the program does not have invocation privilege control, and can be...

4.3CVSS6.8AI score0.00519EPSS
SaveExploits0References1
Rows per page
Query Builder