CVE-2025-20912

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...

CVE-2025-20910

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery...

CVE-2025-20910

CVE-2025-20910 affects Galaxy Watch Gallery versions prior to SMR Mar-2025 Release 1, where an incorrect default permission allows local attackers to access data in Galaxy Watch Gallery. The CVSS v3.1 vector (Local, Low attack complexity, No privileges, No user interaction) yields a base score of...

PT-2025-9881

Name of the Vulnerable Software and Affected Versions Galaxy Watch Gallery versions prior to SMR Mar-2025 Release 1 Description The issue is related to an incorrect default permission in Galaxy Watch Gallery, allowing local attackers to access data. Recommendations For versions prior to SMR...

Oracle Linux 9 : firefox (ELSA-2025-2359)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2359 advisory. 128.8.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Mar-2025 Release 1, which stems from an error in the default privilege...

PT-2025-9883

Name of the Vulnerable Software and Affected Versions DiagMonAgent versions prior to SMR Mar-2025 Release 1 Description The issue is related to an incorrect default permission in DiagMonAgent, allowing local attackers to access data within Galaxy Watch. Recommendations For versions prior to SMR...

CVE-2024-13893: Use of Default Credentials

Smartwares cameras CIP-37210AT and C724IP, as well as others which share the same firmware in versions up to 3.3.0, might share same credentials for telnet service. Hash of the password can be retrieved through physical access to SPI connected memory. For the telnet service to be enabled, the...

CVE-2025-20910: Undefined Security Weakness

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery...

SAMSUNG Watch 安全漏洞

SAMSUNG Watch is a smartwatch from Samsung South Korea. A security vulnerability exists in SAMSUNG Watch versions prior to SMR Mar-2025 Release 1, which stems from a default permission error that could allow a local attacker to access data in the Galaxy Watch Gallery...

Envoy Gateway 安全漏洞

Envoy Gateway is an Envoy Proxy open source that uses the Envoy proxy as a gateway for standalone or Kubernetes-based applications. A security vulnerability exists in Envoy Gateway versions prior to 1.2.7 and 1.3.1 that stems from the default Envoy Proxy access logging configuration being...

SUSE CVE-2025-1866

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32...

SUSE CVE-2025-1935

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

UniRide Vehicle Booking Management System 1.0 Insecure Settings

UniRide Vehicle Booking Management System version 1.0 suffers from an ignored default credential vulnerability. ============================================================================================================================================= | Title : UniRide Vehicle Booking Managemen...

Alphion ASEE-1443 安全漏洞

The Alphion ASEE-1443 is a wireless router from Alphion. A security vulnerability exists in the Alphion ASEE-1443 version v0.4.H.00.02.15, which stems from a misconfiguration of the default DNS suffix, which could lead to the disclosure of sensitive information...

CVE-2025-1935

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability affects Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

CVE-2025-1935

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability affects Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

DEBIAN-CVE-2025-1935

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

UBUNTU-CVE-2025-1935

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

CVE-2025-1935 Clickjacking the registerProtocolHandler info-bar

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability was fixed in Firefox 136, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...