13895 matches found
EUVD-2025-33673
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...
CVE-2025-21060
CVE-2025-21060 affects Samsung Smart Switch prior to version 3.7.67.2, where cleartext storage of sensitive information in backups allows local attackers to access application backup data after user interaction triggers the vulnerability. The underlying issue is the storage of backup data in clea...
[SECURITY] Fedora 42 Update: ibus-bamboo-0.8.4~RC6-2.fc42
A Vietnamese IME for IBus using Bamboo Engine. The open source Vietnamese keyboard supports most common encodings, popular Vietnamese typing methods, smart diacritics, spell checking, shortcuts,...
PT-2025-41521
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software stores sensitive information in cleartext, potentially allowing local attackers to access this data. User interaction is required to trigger this issue. The vulnerability affects...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.66.6, which stems from improper authentication and could lead to an adjacent attacker accessing the transferred data...
PT-2025-41520
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description A flaw exists in Smart Switch that allows local attackers to access backup data from applications due to the cleartext storage of sensitive information. User interaction is required to trigge...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing sensitive data...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from storing sensitive information in clear text and could lead to a local attacker accessing application backup data...
PT-2025-41524
Name of the Vulnerable Software and Affected Versions Samsung Smart Switch versions prior to 3.7.66.6 Description A flaw exists in the authentication process of Smart Switch that could allow nearby attackers to gain access to data during transfers. This authentication bypass enables unauthorized...
SAMSUNG Smart Switch 安全漏洞
SAMSUNG Smart Switch is a data migration tool from Samsung South Korea. A security vulnerability exists in SAMSUNG Smart Switch versions prior to 3.7.67.2, which stems from the use of an insecure encryption algorithm that could lead to a local attacker replacing the recovery application...
PT-2025-41522
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.67.2 Description The software utilizes a broken or risky cryptographic algorithm. This allows a local attacker to replace the restoring application, but requires user interaction to trigger the issue...
CVE-2025-40885
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
EUVD-2025-32866
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized da...
CVE-2025-40885
CVE-2025-40885 is an authenticated SQL Injection vulnerability in Nozomi Networks Guardian/CMC Smart Polling functionality caused by improper input validation. An authenticated user with limited privileges can cause the DBMS to execute arbitrary SELECT statements, potentially exposing data. Affec...
CVE-2025-59450
The YoSmart YoLink Smart Hub firmware 0382 is unencrypted, and data extracted from it can be used to determine network access credentials...