JXL_Infotainment_CVE-2025-69515

CVE-2025-69515 攻撃名 📂 追加詳細 影響を受ける製品 影響を受けるコンポーネント GNSS受信機モジュール / GPSチップセット インフォテインメント ナビゲーションモジュール 位置情報サービスフレームワーク 攻撃ベクトル インフォテインメントユニットは、SDRデバイスを使用して偽装GPS信号をブロードキャストすることにより標的にされる可能性があります。GNSS入力経路には完全性検証がないため、システムは近傍から送信されたより強い偽装信号を受け入れる可能性があり、物理的なアクセスなしでリモートによる位置情報の改ざんが可能になります。 CVSSスコア : 5.4 AV:A...

CVE-2026-48235 Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data

Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in incs/remotes.inc.php where latitude, longitude, callsign, mph, altitude, and timestamp values parsed from external GPS tracking service XML/JSON responses InstaMapper and Google Latitude integration are concatenated into...

Missing Authorization

Overview org.apache.polaris:polaris-runtime-service is an a catalog for data lakes. It provides new levels of choice, flexibility and control over data, with full enterprise security and Apache Iceberg interoperability across a multitude of engines and infrastructure Affected versions of this...

CVE-2018-6222

Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log files and be manipulated to execute arbitrary commands and attain command execution on a vulnerable system...

openstack-glance: Glance image status manipulation through locations

An authorization vulnerability in OpenStack Image service was discovered, which allowed image-status manipulation using locations. By removing the last location of an image, an authenticated user could change the status from 'active' to 'queue'. A malicious tenant could exploit this flaw to...

openstack-glance: Glance image status manipulation through locations

An authorization vulnerability in OpenStack Image service was discovered, which allowed image-status manipulation using locations. By removing the last location of an image, an authenticated user could change the status from 'active' to 'queue'. A malicious tenant could exploit this flaw to...

Group Documents 1.2.1 - bp-group-documents-settings.php file Parameter Remote Path Traversal File Location Manipulation

The BP Group Documents WordPress plugin was affected by a bp-group-documents-settings.php file Parameter Remote Path Traversal File Location Manipulation security vulnerability...