129 matches found
CVE-2025-26332
TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the...
CVE-2025-26332: Insertion of Sensitive Information into Log File
TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the...
CVE-2021-3146
The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...
CVE-2025-32409: Relative Path Traversal
Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image signed with debug keys can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of...
PT-2025-15302 · Ratta · Ratta Supernote A6 X2 Nomad
Name of the Vulnerable Software and Affected Versions: Ratta SuperNote A6 X2 Nomad versions prior to December 2024 Description: The issue allows remote code execution because an arbitrary firmware image signed with debug keys can be sent to TCP port 60002, and placed into the correct image-update...
CVE-2025-32409
The CVE-2025-32409 entry relates to Ratta SuperNote A6 X2 Nomad (firmware prior to December 2024). A remote code execution is possible via sending an arbitrary firmware image (signed with debug keys) to TCP port 60002, placing it in the correct image-update location. The root cause combines direc...
Ratta SuperNote A6 X2 Nomad 安全漏洞
Ratta SuperNote A6 X2 Nomad is an electronic notebook from Ratta SuperNote. A security vulnerability exists in the Ratta SuperNote A6 X2 Nomad that stems from improper directory traversal and concurrency handling, which could lead to remote code execution...
CVE-2025-32409
Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image signed with debug keys can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of...
SUSE CVE-2024-5660
Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...
CVE-2024-5660
Use of Hardware Page Aggregation HPA and Stage-1 and/or Stage-2 translation on Cortex-A77, Cortex-A78, Cortex-A78C, Cortex-A78AE, Cortex-A710, Cortex-X1, Cortex-X1C, Cortex-X2, Cortex-X3, Cortex-X4, Cortex-X925, Neoverse V1, Neoverse V2, Neoverse V3, Neoverse V3AE, Neoverse N2 may permit bypass o...
ARM多款产品 安全漏洞
The ARM Cortex-A77, among others, is a central processing unit from the British company ARM. A security vulnerability exists in various Arm products, which stems from the possibility that memory accesses may be incorrectly converted. The following products are affected: ARM Cortex-A77, ARM...
Robot vacuum cleaners hacked to spy on, insult owners
Multiple robot vacuum cleaners in the US were hacked to yell obscenities and insults through the onboard speakers. ABC news was able to confirm reports of this hack in robot vacuum cleaners of the type Ecovacs Deebot X2, which are manufactured in China. Ecovacs is considered the leading service...
PT-2024-32416 · Gotenna · Gotenna Pro App +2
Name of the Vulnerable Software and Affected Versions: goTenna Pro App versions affected versions not specified goTenna Pro X goTenna Pro X2 Description: The goTenna Pro App uses a weak password for sharing encryption keys via the key broadcast method. If the broadcasted encryption key is capture...
PT-2024-32423
Name of the Vulnerable Software and Affected Versions goTenna Pro App affected versions not specified goTenna Pro X affected versions not specified goTenna Pro X2 affected versions not specified Description The goTenna Pro App encryption key name is sent unencrypted when shared over RF through a...
PT-2024-32424 · Gotenna · Gotenna Pro App +2
Name of the Vulnerable Software and Affected Versions: goTenna Pro App affected versions not specified goTenna Pro X and Pro X2 affected versions not specified Description: The issue is related to the goTenna Pro App not injecting extra characters into broadcasted frames to obfuscate the length o...
PT-2024-32421 · Gotenna · Gotenna Pro App +2
Name of the Vulnerable Software and Affected Versions: goTenna Pro App affected versions not specified goTenna Pro X affected versions not specified goTenna Pro X2 affected versions not specified Description: The goTenna Pro App does not use SecureRandom when generating passwords for sharing...
PT-2024-32426 · Gotenna · Gotenna Pro App +2
Name of the Vulnerable Software and Affected Versions: goTenna Pro App affected versions not specified goTenna Pro X affected versions not specified goTenna Pro X2 affected versions not specified Description: The goTenna Pro series allows unauthenticated attackers to remotely update the local...
CVE-2022-34453
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...
CVE-2022-34453
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...
Improper access control
Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...