2025

Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read

Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory

Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local at

Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of speci

Improper handling of insufficient permission in Samsung Device Health Manager Service prior to SMR Apr-2025 Release 1 al

Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical att

Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected da

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows lo

Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files w

The Melhor Envio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi

A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the fu

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerabilit

A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function

A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by

A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critic

The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindi

Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py.

A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the funct

A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file mess

The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. T

A vulnerability classified as problematic was found in hailey888 oa_system up to 2025.01.01. This vulnerability affects

A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and

A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown pa

libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly de

A vulnerability exists in the errorpage.php file of the CS2-WeaponPaints-Website v2.1.7 where user-controlled input is n

Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Ad

Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialRefe

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:

A cross-site scripting (XSS) vulnerability in Typecho v1.2.1 allows attackers to execute arbitrary web scripts or HTML v

EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data po

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter

An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the postID parameter in the edit method

tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowi

tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior t

tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior t

Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a speci

A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unk

A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB)

A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace D

A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerabili

Information disclosure may be there when a guest VM is connected.

Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verifi

Memory corruption while processing IOCTL calls to add route entry in the HW.

Memory corruption while accessing MSM channel map and mixer functions.

Memory corruption while invoking IOCTL map buffer request from userspace.