Approved changes feed: RSS · Atom
cpe:2.3:a:blackvue:app:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Blackvue (1fba965c-1f74-52b3-8a6d-a087911405d3) |
|---|---|
| Product | App (bb0afca9-32c5-5c49-83a2-733c796d67c7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2356 |
vulnerable | 2026-06-08 07:16:56.859099 |
BlackVue App API deviceDelete get request method with sensitive query strings
LOW (3.7)
A vulnerability was found in BlackVue App 3.65 on Android. It has been classified as problematic. This affects the function deviceDelete of the component API Handler. The manipulation leads to use of get request method with sensitive query strings. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-17T01:00:07.179Z
Updated: 2025-03-17T13:37:54.918Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2355 |
vulnerable | 2026-06-08 07:16:56.858689 |
BlackVue App API Endpoint credentials storage
LOW (3.3)
A vulnerability was found in BlackVue App 3.65 on Android and classified as problematic. Affected by this issue is some unknown functionality of the component API Endpoint Handler. The manipulation of the argument BCS_TOKEN/SECRET_KEY leads to unprotected storage of credentials. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-03-17T00:31:04.118Z
Updated: 2025-03-17T13:38:26.270Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.