2025

Out-of-bounds write in accessing buffer storing the decoded video frames in libsthmbc.so prior to SMR Jan-2025 Release 1

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with admin

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6. An attacker can uplo

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker

The JustRows free WordPress plugin through 0.2 does not sanitise and escape a parameter before outputting it back in the

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the p

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA applicatio

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA applicatio

WeGIA is a Web Manager for Charitable Institutions. A SQL Injection vulnerability was discovered in the WeGIA applicatio

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protectin

reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands v

Jellystat is a free and open source Statistics App for Jellyfin. In affected versions Jellystat is directly using a user

reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovered in reNgine, where

Polycom RealPresence Group 500 <=20 has Insecure Permissions due to automatically loaded cookies. This allows for the us

ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which

Geovision GV-ASWeb with the version 6.1.1.0 or less allows attackers to modify POST request method with the GET against

Information disclosure vulnerability in Geovision GV-ASManager web application with the version v6.1.0.0 or less, which

A Cross-Site Request Forgery (CSRF) vulnerability in Geovision GV-ASWeb application with the version 6.1.1.0 or less tha

Broken access control vulnerability in Geovision GV-ASWeb with version v6.1.0.0 or less. This vulnerability allows low p

Nedis SmartLife android app v1.4.0 was discovered to contain an API key disclosure vulnerability.

An issue in Nedis SmartLife Video Doorbell (WIFICDP10GY), Nedis SmartLife IOS v1.4.0 causes users who are disconnected f

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects

SQL injection vulnerability in the ZimbraSync Service SOAP endpoint in Zimbra Collaboration 10.0.x before 10.0.12 and 10

Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive inf

ChestnutCMS <=1.5.0 has an arbitrary file deletion vulnerability in contentcore.controller.FileController, which allows

An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF

The BoomBox Theme Extensions plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and inclu

With address book access, SMB/FTP settings could be modified, redirecting scans and possibly capturing credentials. This

Prolink 4G LTE Mobile Wi-Fi DL-7203E V4.0.0B05 is vulnerable to SQL Injection in in the /reqproc/proc_get endpoint. The

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator pri

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality.

Memory corruption during management frame processing due to mismatch in T2LM info element.

Information disclosure while parsing the OCI IE with invalid length.

Memory corruption while reading CPU state data during guest VM suspend.

Memory corruption while power-up or power-down sequence of the camera sensor.

Memory corruption can occur in the camera when an invalid CID is used.

Memory corruption in Camera due to unusually high number of nodes passed to AXI port.

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

Memory corruption while validating number of devices in Camera kernel .

Memory corruption may occour while generating test pattern due to negative indexing of display ID.

Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface.

Memory corruption while handling IOCTL call from user-space to set latency level.

Memory corruption while taking a snapshot with hardware encoder due to unvalidated userspace buffer.

Memory corruption while configuring a Hypervisor based input virtual device.

Memory corruption while parsing the memory map info in IOCTL calls.

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WPJobBoar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gt3themes Photo Ga

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ederson Peka Media