CVE-2025-36755

The CVE-2025-36755 entry describes the CleverDisplay BlueOne hardware player. When its USB interfaces are physically enclosed, the device is normally inaccessible; after circumventing the enclosure, a USB keyboard can be connected and ESC pressed during boot to access the BIOS setup interface. BI...

EUVD-2025-203085

The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions. Researchers demonstrated that, after cicumventing the device’s protective enclosure, it was possible to connect a USB keyboard and press ESC during...

CVE-2025-10451

CVE-2025-10451 affects Insyde InsydeH2O (EFI/UEFI) with an unchecked output buffer that can enable arbitrary code execution in System Management Mode (SMM) and may cause SMM memory corruption. The CVE is described as a H19Int15CallbackSmm memory-corruption vulnerability in combined DXE/SMM (SMRAM...

SolarEdge SE3680H 安全漏洞

The SolarEdge SE3680H is an HDW inverter from SolarEdge, Israel. A security vulnerability exists in the SolarEdge SE3680H that originates from the unauthenticated disclosure of sensitive information during the boot loop, which could lead to the disclosure of operating system information...

PT-2025-50938

The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically enclosed and inaccessible under normal operating conditions. Researchers demonstrated that, after cicumventing the device’s protective enclosure, it was possible to connect a USB keyboard and press ESC during...

CVE-2025-36938

In U-Boot of appenduint32le, there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Critical: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14.2 for Spring Boot release.

Red Hat build of Apache Camel 4.14.2 for Spring Boot patch release and security update is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-36938

In U-Boot of appenduint32le, there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36938

In U-Boot of appenduint32le, there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36938

A logic error in the append_uint32_le() function within U-Boot allows for a possible fault injection . This vulnerability can lead to a physical escalation of privilege without requiring additional execution privileges or user interaction. This issue specifically affects the Pixel Tablet Dock sub...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (2023.02), tech.powerjob:powerjob-client (4.2.1) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.2.1)

tech.powerjob:powerjob-common MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob 2023.02 - tech.powerjob:powerjob-client 4.2.1 ...

tech.powerjob:powerjob-client (4.1.0), tech.powerjob:powerjob-official-processors (1.2.0) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.1.0)

tech.powerjob:powerjob-common MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.1.0 - tech.powerjob:powerjob-official-processors 1.2.0 -...

io.github.shuigedeng:taotao-cloud-starter-job-powerjob (>=2023.2.01, <=2023.3.01), tech.powerjob:powerjob-client (4.2.0) +4 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.2.0)

tech.powerjob:powerjob-common MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - io.github.shuigedeng:taotao-cloud-starter-job-powerjob =2023.2.01, =2023.3.01 -...

tech.powerjob:powerjob-client (4.0.0), tech.powerjob:powerjob-official-processors (1.1.0) +3 more potentially affected by CVE-2025-14518 via tech.powerjob:powerjob-common (4.0.0)

tech.powerjob:powerjob-common MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on tech.powerjob:powerjob-common and may be impacted: - tech.powerjob:powerjob-client 4.0.0 - tech.powerjob:powerjob-official-processors 1.1.0 -...

CVE-2025-65829

The ESP32 system on a chip SoC that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved ...

CVE-2025-24857

Improper access control for volatile memory containing boot code in Universal Boot Loader U-Boot before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2023-53787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regulator: da9063: fix null pointer deref with partial DT config When some of the da9063 regulators do not have corresponding DT nodes a null pointer dereferenc...

CVE-2025-36938: Protection Mechanism Failure

In U-Boot of appenduint32le, there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-50718

Name of the Vulnerable Software and Affected Versions U-Boot affected versions not specified Description A logic error exists in the append uint32 le function within U-Boot. This could allow for fault injection, potentially leading to physical escalation of privilege without requiring additional...

EUVD-2025-202615

The ESP32 system on a chip SoC that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved ...