54364 matches found
CVE-2025-21061
CVE-2025-21061 affects Samsung Smart Switch prior to 3.7.67.2. The issue is cleartext storage of sensitive data, enabling local attackers to access data. Trigger requires user interaction. Root cause: storing sensitive information in cleartext within the affected Smart Switch version. Impact note...
EUVD-2025-33672
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability...
CVE-2025-21060
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...
CVE-2025-21060
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...
EUVD-2025-33673
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...
CVE-2025-21060
CVE-2025-21060 affects Samsung Smart Switch prior to version 3.7.67.2, where cleartext storage of sensitive information in backups allows local attackers to access application backup data after user interaction triggers the vulnerability. The underlying issue is the storage of backup data in clea...
CVE-2025-21049
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...
CVE-2025-21049
Samsung SecSettings suffers an improper access control flaw prior to SMR Oct-2025 Release 1. This is exploitable by local attackers and requires user interaction to trigger, potentially exposing sensitive information. The issue is documented across multiple sources (CVE-2025-21049) with a medium ...
CVE-2025-21049
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...
EUVD-2025-33599
Malicious code in cx-hub-interaction-ui-lib npm...
MAL-2025-48276 Malicious code in cx-hub-interaction-ui-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview cx-hub-interaction-ui-lib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in cx-hub-interaction-ui-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-41510
Name of the Vulnerable Software and Affected Versions SecSettings versions prior to SMR Oct-2025 Release 1 Description An improper access control issue exists in SecSettings. This allows local attackers to access sensitive information. User interaction is required to trigger this issue...
Ivanti Endpoint Manager UniqueFilename Unrestricted File Upload Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. Alternatively, no user interaction is...
PT-2025-41521
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software stores sensitive information in cleartext, potentially allowing local attackers to access this data. User interaction is required to trigger this issue. The vulnerability affects...
PT-2025-41520
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description A flaw exists in Smart Switch that allows local attackers to access backup data from applications due to the cleartext storage of sensitive information. User interaction is required to trigge...
PT-2025-41522
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software utilizes a broken or risky cryptographic algorithm. This allows a local attacker to replace the restoring application, but requires user interaction to trigger the issue...
EUVD-2025-32772
In the Linux kernel, the following vulnerability has been resolved: md: don't dereference mddev after exportrdev Except for initial reference, mddev-kobject is referenced by rdev-kobject, and if the last rdev is freed, there is no guarantee that mddev is still valid. Hence mddev should not be use...