Vulnerabilities (CVE)

Filtered by CWE-922
Total 124 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16560 1 Sandisk 1 Secureaccess 2023-12-10 2.1 LOW 4.3 MEDIUM
SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain situations, such as if the file is being edited when the user exits the application or if the application crashes.
CVE-2017-0493 1 Google 1 Android 2023-12-10 4.3 MEDIUM 5.5 MEDIUM
An information disclosure vulnerability in File-Based Encryption could enable a local malicious attacker to bypass operating system protections for the lock screen. This issue is rated as Moderate due to the possibility of bypassing the lock screen. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-32793550.
CVE-2017-7253 1 Dahuasecurity 2 Ip Camera, Ip Camera Firmware 2023-12-10 9.0 HIGH 8.8 HIGH
Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to list all users via a request to a certain URI. 2. Login to the IP camera with admin credentials so as to obtain full control of the target IP camera. During exploitation, the first JSON object encountered has a "Component error: login challenge!" message. The second JSON object encountered has a result indicating a successful admin login.
CVE-2017-6911 1 Usb Pratirodh Project 1 Usb Pratirodh 2023-12-10 2.1 LOW 6.6 MEDIUM
USB Pratirodh is prone to sensitive information disclosure. It stores sensitive information such as username and password in simple usb.xml. An attacker with physical access to the system can modify the file according his own requirements that may aid in further attack.