28584 matches found
CVE-2025-65821
As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additionally, this allows the adversary to...
CVE-2025-65821
The CVE-2025-65821 entry concerns the ESP32 chip where UART download mode remains enabled. The vulnerability affects the UART download mechanism that can be exploited to dump the device flash, exposing sensitive data stored in the NVS partition (e.g., current and prior Wi‑Fi network details) and ...
PT-2025-50500
Name of the Vulnerable Software and Affected Versions Meatmeet affected versions not specified Description The firmware on the Meatmeet basestation is not encrypted. An attacker with physical access can retrieve the firmware dump via UART, potentially discovering credentials for current and...
Release Information for Dell SC Series Plug-In for Veeam Backup & Replication
This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Dell SC Series Plug-In v1.0.211, ensure that you are running Veeam Backup & Replication...
CVE-2025-64650
IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files...
EUVD-2025-201888
Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specific files may be accessed from other malicious applications...
EUVD-2023-60139
In the Linux kernel, the following vulnerability has been resolved: bpf: bpfskstorage: Fix invalid wait context lockdep report './testprogs -t testlocalstorage' reported a splat: 27.137569 ============================= 27.138122 BUG: Invalid wait context 27.138650 6.5.0-03980-gd11ae1b16b0a 247...
EUVD-2023-60149
In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alaudacheckmedia Syzbot got KMSAN to complain about access to an uninitialized value in the alauda subdriver of usb-storage: BUG: KMSAN: uninit-value in alaudatransport+0x462/0x57f0...
CVE-2025-59517
Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-59516
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-59516
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-59517
Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
CVE-2025-59517
CVE-2025-59517 is a Windows Storage VSP Driver elevation of privilege vulnerability caused by improper access control. Exploitation would enable a locally authenticated attacker to elevate privileges on affected Windows systems. Connected documents confirm this is tied to the Windows Storage VSP ...
CVE-2025-59517 Windows Storage VSP Driver Elevation of Privilege Vulnerability
...
EUVD-2025-202233
Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-59516
CVE-2025-59516 is a Windows Storage VSP Driver elevation-of-privilege vulnerability. The issue is described as missing authentication for a critical function, enabling an authorized local attacker to elevate privileges. Public references in connected documents confirm the affected component is th...
EUVD-2025-202232
Improper access control in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...