2025

Direct Object Reference Vulnerability (IDOR) in i2A's CronosWeb, in versions prior to 25.00.00.12, inclusive. This vulne

Bypass vulnerability in the authentication method in the GTT Tax Information System application, related to the Active D

An unauthenticated device registration vulnerability, caused by Improperly Controlled Modification of Dynamically-Determ

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows atta

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authori

A privilege escalation vulnerability exists in Google Cloud's Dialogflow CX. Dialogflow agent developers with Webhook e

A remote code execution (RCE) vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifa

Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers t

COMMAX WebViewer ActiveX Control 2.1.4.5 contains a buffer overflow vulnerability that allows attackers to execute arbit

IntelliChoice eFORCE Software Suite 2.5.9 contains a username enumeration vulnerability that allows attackers to enumera

COMMAX Smart Home System is a smart IoT home solution that allows an unauthenticated attacker to disclose RTSP credentia

COMMAX Smart Home System allows an unauthenticated attacker to change configuration and cause denial-of-service through

COMMAX Smart Home System CDP-1020n contains an SQL injection vulnerability that allows attackers to bypass authenticatio

COMMAX CVD-Axx DVR 5.1.4 contains weak default administrative credentials that allow remote password attacks and disclos

COMMAX Biometric Access Control System 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated

COMMAX UMS Client ActiveX Control 1.7.0.2 contains a heap-based buffer overflow vulnerability that allows attackers to e

Entrust Instant Financial Issuance (IFI) On Premise software (formerly referred to as CardWizard) versions 5.x, prior to

Legality WHISTLEBLOWING by DigitalPA contains a protection mechanism failure in which critical HTTP security headers are

A security issue exists within 432ES-IG3 Series A, which affects GuardLink® EtherNet/IP Interface, resulting in denial-o

Uncontrolled Search Path Element vulnerability in Yandex Disk on MacOS allows Search Order Hijacking.This issue affects

Uncontrolled Search Path Element vulnerability in Yandex Messenger on MacOS allows Search Order Hijacking.This issue aff

In the Linux kernel, the following vulnerability has been resolved: futex: Don't leak robust_list pointer on exec race

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix oops in xe_gem_fault when running core_

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix nullptr err of vm_handle_moved If

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Do not share the name pointer bet

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate userq input args This will he

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix infinite loop in __insert_extent_tree()

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mmap write lock not release If mma

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Shutdown FW DMA in bnxt_shutdown() The ne

In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix deadlock in drm_sched_entity_kill_jo

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix system hang caused by cpu-clock usag

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successf

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JMRI.This issue affects

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects ret

A security issue was discovered in DataMosaix Private Cloud, allowing users with low privilege to perform sensitive data

EDK2 contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix warning when putting transaction with qg

In the Linux kernel, the following vulnerability has been resolved: drm/mxsfb: Disable overlay plane in mxsfb_plane_ove

In the Linux kernel, the following vulnerability has been resolved: netlink: do not hard code device address lenth in f

In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group

In the Linux kernel, the following vulnerability has been resolved: s390/idle: mark arch_cpu_idle() noinstr linux-next

In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung_tty: Fix a memory leak in s3c2

In the Linux kernel, the following vulnerability has been resolved: bpf: bpf_sk_storage: Fix invalid wait context lockd

In the Linux kernel, the following vulnerability has been resolved: of: overlay: Call of_changeset_init() early When o

In the Linux kernel, the following vulnerability has been resolved: net: dsa: ocelot: call dsa_tag_8021q_unregister() u

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in drive

In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk->cb_running Both

In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_secret_store

In the Linux kernel, the following vulnerability has been resolved: iavf: use internal state to free traffic IRQs If t

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make su