2025

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Mahmudul Hasan Arif Ninja Ch

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dudaster Elementor

Missing Authorization vulnerability in Payoneer Checkout Payoneer Checkout payoneer-checkout allows Content Spoofing.Thi

Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Element

Cross-Site Request Forgery (CSRF) vulnerability in WPKube Authors List authors-list allows Cross Site Request Forgery.Th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arjan Olsder SEO A

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKube Kiwi kiwi-s

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme Themify

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VW THEMES Ibtana –

Missing Authorization vulnerability in Jiro Sasamoto Ray Enterprise Translation lingotek-translation allows Exploiting I

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in arisoft ARI Fancy

Missing Authorization vulnerability in gutentor Gutentor gutentor allows Exploiting Incorrectly Configured Access Contro

A weakness has been identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the fil

Race condition vulnerability in the device standby module. Impact: Successful exploitation of this vulnerability may cau

Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability ma

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the

The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of i

RATOC RAID Monitoring Manager for Windows provided by RATOC Systems, Inc. registers a Windows service with an unquoted f

Improper authorization in handler for custom URL scheme issue in "Yahoo! Shopping" App for Android versions prior to 14.

Obsidian GitHub Copilot Plugin versions prior to 1.1.7 store Github API token in cleartext form. As a result, an attacke

The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions

Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs.

Weblate is a web based localization tool. Versions lower than 5.13.1 contain a vulnerability that causes long session ex

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions belo

Exposure of sensitive information to an unauthorized actor in Xbox allows an unauthorized attacker to disclose informati

In android_app of Android.bp, there is a possible way to launch any activity as a system user. This could lead to local

In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new

In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility s

In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error. This could

In multiple locations, there is a possible way to access data displayed on the screen due to side channel information di

In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy. This could

In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input val

In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a l

In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused

In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path trav

In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exh

In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical pa

In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused

In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack. This could lead

In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the cod

In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActi

In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check. This c

In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio str

In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages. This c

In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in

In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic er

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to lo

In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data. This could lead

In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission chec