37 matches found
CVE-2024-34463
BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. The packet data also lacks authentication and integrity protection...
EUVD-2006-7162
Malware in sbrugna...
EUVD-2019-19195
Malware in sbrugna...
EUVD-2011-4585
Malware in sbrugna...
EUVD-2025-18244
Malicious code in bioql PyPI...
EUVD-2021-7360
Malicious code in bioql PyPI...
Palo Alto GlobalProtect App Windows 6.x < 6.2.8-h2 / 6.3.x < 6.3.3-650-650 Improper Access Control (CVE-2025-4227)
The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.x prior to 6.2.8-h2 or 6.3.x prior to 6.3.3-650. It is, therefore, affected by a improper access control vulnerability: - An improper access control vulnerability in the Endpoint Traffic Policy Enforcement featur...
CVE-2025-4227
An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...
CVE-2025-4227
An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows...
PT-2025-25385 · Palo Alto Networks · Palo Alto Networks Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app affected versions not specified Description: The issue is related to an improper access control vulnerability in the Endpoint Traffic Policy Enforcement feature. This allows certain packets to remain...
CVE-2021-1896
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity...
Cisco NX-OS Cryptographic Issues (CVE-2011-4667)
The encryption library in Cisco IOS Software 15.21T, 15.21T1, and 15.22T, Cisco NX-OS in Cisco MDS 9222i Multiservice Modular Switch, Cisco MDS 9000 18/4-Port Multiservice Module, and Cisco MDS 9000 Storage Services Node module before 5.26, and Cisco IOS in Cisco VPN Services Port Adaptor for...
BIT-CILIUM-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...
CVE-2025-32793 Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.15.0 to 1.15.15, 1.16.0 to 1.16.8, and 1.17.0 to 1.17.2, are vulnerable when using Wireguard transparent encryption in a Cilium cluster, packets that originate from a terminating endpoint can lea...
Cilium 安全漏洞
Cilium is an open source software from Cilium Open Source. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium that stems from a contention...
CVE-2024-34463
The CVE-2024-34463 vulnerability affects BPL Medical Technologies’ PWS-01BT devices and Be Well Android app, with sensitive data sent in unencrypted BLE packets and lacking authentication/integrity protection. Connected sources (Red Hat, CISA ICS) confirm cleartext transmission and potential inte...
PT-2024-25917 · Bpl · Bpl Personal Weighing Scale Pws-01Bt
Name of the Vulnerable Software and Affected Versions: BPL Personal Weighing Scale PWS-01BT IND/09/18/599 Description: The BPL Personal Weighing Scale PWS-01BT IND/09/18/599 devices send sensitive information in unencrypted BLE packets. The packet data also lacks authentication and integrity...
SUSE CVE-2006-7180
ieee80211output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to obtain sensitive information related to network structure, and possibly cause a denial of service disrupted authentication and conduct spoofing attacks...
CVE-2021-1896
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity...
Code injection
Weak configuration in WLAN could cause forwarding of unencrypted packets from one client to another in Snapdragon Compute, Snapdragon Connectivity...