7322 matches found
CVE-2025-20909
Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-20909
Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-20903
CVE-2025-20903 describes an improper access control flaw in Samsung’s SecSettingsIntelligence prior to the SMR March-2025 Release 1. The issue allows local attackers to perform privileged activities, with user interaction required to trigger the vulnerability. The CVSS 3.1 vector indicates local ...
PT-2025-9882
Name of the Vulnerable Software and Affected Versions sem wifi service versions prior to SMR Mar-2025 Release 1 Description The issue is related to improper access control in the sem wifi service, allowing privileged local attackers to update the MAC address of the Galaxy Watch. Recommendations F...
PT-2025-9883
Name of the Vulnerable Software and Affected Versions DiagMonAgent versions prior to SMR Mar-2025 Release 1 Description The issue is related to an incorrect default permission in DiagMonAgent, allowing local attackers to access data within Galaxy Watch. Recommendations For versions prior to SMR...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Mar-2025 Release 1, which stems from an error in the default privilege...
Linux Distros Unpatched Vulnerability : CVE-2024-7540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information o...
Linux Distros Unpatched Vulnerability : CVE-2022-2380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Linux kernel was found vulnerable out of bounds memory access in the drivers/video/fbdev/sm712fb.c:smtcfbread function. The vulnerability could result in...
Linux Distros Unpatched Vulnerability : CVE-2021-34981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected...
Linux Distros Unpatched Vulnerability : CVE-2022-42432
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain...
CVE-2025-23409
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios...
Linux Distros Unpatched Vulnerability : CVE-2020-28974
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the...
Linux Distros Unpatched Vulnerability : CVE-2018-18710
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers ...
GPAC 安全漏洞
GPAC is an open source multimedia framework from GPAC Open Source. A security vulnerability exists in GPAC version 2.5, which originates from a buffer overflow and allows local attackers to execute arbitrary code...
Siemens SIMATIC Devices Linux Kernel NULL Pointer Dereference (CVE-2022-42722)
In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices. This plugin only works with Tenable.ot. Please visit...
Siemens SIMATIC Devices Linux Kernel Loop with Unreachable Exit Condition ('Infinite Loop') (CVE-2022-42721)
A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers able to inject WLAN frames to corrupt a linked list and, in turn, potentially execute code. This plugin only works with Tenable.ot. Please visit...
CVE-2024-57964
Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...
CVE-2024-57963
Insecure Loading of Dynamic Link Libraries have been discovered in USB-CONVERTERCABLE DRIVER, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects USB-CONVERTERCABLE DRIVER:...
CVE-2024-57964
Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...
CVE-2024-57964 Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program
Insecure Loading of Dynamic Link Libraries have been discovered in HVAC Energy Saving Program, which could allow local attackers to potentially disclose information or execute arbitray code on affected systems. This issue affects HVAC Energy Saving Program:...