Show filters
1,503 Total Results
Displaying 21-30 of 1,503
Sort by:
Attacker Value
Unknown

CVE-2023-45716

Disclosure Date: February 09, 2024 (last updated February 27, 2024)
Sametime is impacted by sensitive information passed in URL.
Attacker Value
Unknown

CVE-2024-23806

Disclosure Date: February 07, 2024 (last updated February 15, 2024)
Sensitive data can be extracted from HID iCLASS SE reader configuration cards. This could include credential and device administrator keys.
Attacker Value
Unknown

CVE-2024-20828

Disclosure Date: February 06, 2024 (last updated February 14, 2024)
Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.
Attacker Value
Unknown

CVE-2024-20827

Disclosure Date: February 06, 2024 (last updated February 14, 2024)
Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen.
Attacker Value
Unknown

CVE-2023-51820

Disclosure Date: February 02, 2024 (last updated February 10, 2024)
An issue in Blurams Lumi Security Camera (A31C) v.2.3.38.12558 allows a physically proximate attackers to execute arbitrary code.
Attacker Value
Unknown

CVE-2024-0675

Disclosure Date: January 30, 2024 (last updated February 09, 2024)
Vulnerability of improper checking for unusual or exceptional conditions in Lamassu Bitcoin ATM Douro machines, in its 7.1 version, the exploitation of which could allow an attacker with physical access to the ATM to escape kiosk mode, access the underlying Xwindow interface and execute arbitrary commands as an unprivileged user.
Attacker Value
Unknown

CVE-2024-22894

Disclosure Date: January 30, 2024 (last updated March 05, 2024)
An issue fixed in AIT-Deutschland Alpha Innotec Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later and Novelan Heatpumps V2.88.3 or later, V3.89.0 or later, V4.81.3 or later, allows remote attackers to execute arbitrary code via the password component in the shadow file.
Attacker Value
Unknown

CVE-2023-6482

Disclosure Date: January 27, 2024 (last updated February 01, 2024)
Use of encryption key derived from static information in Synaptics Fingerprint Driver allows an attacker to set up a TLS session with the fingerprint sensor and send restricted commands to the fingerprint sensor. This may allow an attacker, who has physical access to the sensor, to enroll a fingerprint into the template database.
Attacker Value
Unknown

CVE-2023-6044

Disclosure Date: January 19, 2024 (last updated January 27, 2024)
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges.
Attacker Value
Unknown

CVE-2023-49515

Disclosure Date: January 17, 2024 (last updated January 25, 2024)
Insecure Permissiosn vulnerability in TP Link TC70 and C200 WIFI Camera v.3 firmware v.1.3.4 and fixed in v.1.3.11 allows a physically proximate attacker to obtain sensitive information via a connection to the UART pin components.