9395 matches found
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to elevate privileges with a physical attack...
CVE-2025-2189
This vulnerability exists in the Tinxy smart devices due to storage of credentials in plaintext within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext credentials stored on the vulnerable...
CVE-2025-2189
The CVE-2025-2189 entry concerns Tinxy smart devices where credentials are stored in plaintext within the device firmware. The vulnerability can be exploited by an attacker with physical access who can extract the firmware and inspect the binary data to obtain plaintext credentials. Documents con...
Schneider Electric EcoStruxure Power Automation System
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. https://www.se.com/us/en/download/document/7EN52-0390/ Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install...
PT-2025-10829 · Microsoft · Windows Ntfs +1
Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue allows an unauthorized attacker to disclose sensitive information through a physical attack by inserting sensitive information into a log file in Windows NTFS. This...
VulnCheck KEV: CVE-2025-24984
Microsoft Windows New Technology File System NTFS contains an insertion of sensitive Information into log file vulnerability that allows an unauthorized attacker to disclose information with a physical attack. An attacker who successfully exploited this vulnerability could potentially read...
PT-2025-10807 · Microsoft · Windows Usb Video Driver +1
Name of the Vulnerable Software and Affected Versions: Windows USB Video Driver affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information, requiring a physical attack. Recommendations: At the moment, there is no...
CVE-2025-24984
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
KLA81545 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface, cause denial of service. Below is a complete list of...
CVE-2024-44179
CVE-2024-44179 affects Apple devices running iOS 17.7/iPadOS 17.7, iOS 18, and iPadOS 18, plus macOS Sequoia 15. The issue arises from restrictions on options offered on a locked device, potentially allowing an attacker with physical access to read contact numbers from the lock screen. Apple fixe...
kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...
kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...
kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...
kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...
kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A vulnerability was found in the Linux kernel's USB Audio driver. This flaw allows an attacker with physical access to the system to use a malicious USB device to gain additional access. This is possible by manipulating system memory, potentially escalating privileges, or executing arbitrary code...
kernel security update
4.18.0-553.44.110.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
CVE-2025-2120 Thinkware Car Dashcam F800 Pro Configuration File hostapd.conf cleartext storage in a file or on disk
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It ...
CVE-2025-2119
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...
CVE-2025-2119 Thinkware Car Dashcam F800 Pro Device Registration default credentials
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...
CVE-2025-2119 Thinkware Car Dashcam F800 Pro Device Registration default credentials
A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the...