1934 matches found
EUVD-2026-52490
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...
CVE-2026-18667
A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elevated privileges by inducing an operator to connect the sensor to an attacker-controlled host...
CVE-2026-18667
Affected product: Tenable Sensor Proxy; version: 1.4.2 (the release fixes a vulnerability). Vulnerability and impact: A remote attacker can cause code to execute with elevated privileges by persuading an operator to connect the sensor to an attacker-controlled host. The CVSS metrics indicate high...
CVE-2026-20486
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833...
CVE-2026-20486
In imgsensor, a local escalation of privilege could occur due to incorrect error handling causing an application crash when a System-privilege context is already held. The advisory notes no user interaction is required for exploitation. The publicly referenced fix is Patch ID ALPS11012302 (Issue ...
CVE-2026-20486
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833...
KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e., \\sms,...
CVE-2026-64497
A flaw was found in the Linux kernel's iio: chemical: scd30 driver, which manages a specific type of sensor. This vulnerability involves an error in how the driver processes numerical data, specifically a 'sign-extension bug' that can corrupt a part of a floating-point number called the exponent...
CVE-2026-64492
A flaw was found in the Linux kernel's tmp006 temperature sensor driver. This vulnerability occurs because the driver incorrectly handles the registration and de-registration of a hardware trigger. When the module is unloaded, a pointer to freed memory remains active, creating a 'dangling pointer...
CVE-2026-12989
A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...
CVE-2026-12989
CVE-2026-12989 describes a lack of authentication in Ghost Robotics' Vision 60 mobile app (APK v5.5.0). An unauthenticated attacker on the device’s internal Wi‑Fi can access the web administration interface and HTTP API, bypassing authorization to view real‑time camera feeds, control robot moveme...
CVE-2026-12989
A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...
EUVD-2026-49179
A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...
PT-2026-64895
A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...
CVE-2026-64497
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Include linux/bitfield.h for FIELDGET. Create new macros for bit manipulation in combination with manual bit manipulation being replaced with FIELDGET. The...
UBUNTU-CVE-2026-64495
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: bmg160: bail out when bandwidth/filter is not in table bmg160getfilter walks bmg160sampfreqtable looking for the entry matching the bwbits value read from the chip: for i = 0; i ARRAYSIZEbmg160sampfreqtable; ++i if...
UBUNTU-CVE-2026-64492
In the Linux kernel, the following vulnerability has been resolved: iio: temperature: tmp006: use devmiiotriggerregister tmp006probe allocates the DRDY trigger with devmiiotriggeralloc but registers it with plain iiotriggerregister. The driver has no .remove callback, so on module unload the...
UBUNTU-CVE-2026-64493
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure or raw temperature, but on the read error path it returns without...
UBUNTU-CVE-2026-64494
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it returns directly. This skips the pmruntimeputautosuspend call at the "ou...
CVE-2026-64503
CVE-2026-64503 – Linux kernel (iio: accel: kxsd9) The vulnerability arises in kxsd9_write_raw() which calls pm_runtime_get_sync() but returns -EINVAL when a non-zero integer part is requested. This path skips the corresponding pm_runtime_put_autosuspend(), leaking a runtime PM usage-counter and p...