5102 matches found
CVE-2025-30072
The CVE-2025-30072 entry concerns the Tiiwee X1 Alarm System TWX1HAKV2. A capture-replay authentication bypass allows attackers to gain physical access to protected facilities without triggering an alarm. Affected component/issue: authentication mechanism enabling bypass via replayed credentials....
OESA-2025-1528 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via...
CVE-2025-25370
An issue in realme GT 2 RMX3311 running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function...
CVE-2025-20047
Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2025-31228
The issue was addressed with improved authentication. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to access notes from the lock screen...
CVE-2025-31227
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5. An attacker with physical access to a device may be able to access a deleted call recording...
Panasonic IR Control Hub vulnerable to Unauthorised firmware loading
Overview IR Control Hub provided by Panasonic contains a vulnerability that may lead to loading of unauthorized firmware. IR Control Hub provided by Panasonic verifies the hash value of the loading firmware when booting, but it keeps booting with the firmware even when it detects that the hash...
Siemens VersiCharge AC Series EV Charger M0 Firmware Arbitrary Code Execution Vulnerability
The VersiCharge AC Series Electric Vehicle Charger is an electric vehicle charging device from Siemens for a variety of application scenarios, including workplaces, retail, parking lots, multi-unit housing, public charging and home charging. An arbitrary code execution vulnerability exists in the...
CVE-2025-25370
An issue in realme GT 2 RMX3311 running Android 14 with realme UI 5.0 allows a physically proximate attacker to obtain sensitive information via the show app only setting function...
SUSE CVE-2025-20012
Incorrect behavior order for some IntelR Coretm Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2025-20047
Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2025-20012
Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2025-20012
Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
ALPINE-CVE-2025-20012
Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
UBUNTU-CVE-2025-20012
Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...
CVE-2025-20047
Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2025-20047
Intel CNVi vulnerability CVE-2025-20047 affects Intel® Integrated Connectivity I/O interface on some Core™ Ultra Processors. The root cause is improper locking in CNVi that could allow an unauthenticated attacker with physical access to escalate privileges. Impact per sources is elevation of priv...
CVE-2025-20047
Improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2025-20012
CVE-2025-20012 affects certain Intel Core Ultra processors and is due to an incorrect behavior order that could allow an unauthenticated user to disclose information with physical access. The connected advisories confirm this is addressed via an Intel microcode update (e.g., intel-microcode) and ...