2025

There may be information disclosure during memory re-allocation in TZ Secure OS.

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affect

Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service

File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulne

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalati

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service

In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information

Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this v

Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this v

Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vu

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avail

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avail

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avail

Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avail

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through i

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part

A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by thi

A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability i

A vulnerability classified as critical was found in Kenj_Frog 肯尼基蛙 company-financial-management 公司财务管理系统 1.0. Affected b

A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14

Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certai

The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to

In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarti

In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal

FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a ma

A vulnerability has been found in 1902756969/code-projects IKUN_Library 1.0 and classified as problematic. This vulnerab

In ConnMan through 1.44, parse_rr in dnsproxy.c has a memcpy length that depends on an RR RDLENGTH value, i.e., *rdlen=n

A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. This

Poppler before 25.04.0 allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function in

A floating-point exception in the PSStack::roll function of Poppler before 25.04.0 can cause an application to crash whe

A vulnerability, which was classified as critical, has been found in code-projects Patient Record Management System 1.0.

In Zammad 6.4.x before 6.4.2, there is information exposure. Only agents should be able to see and work on shared articl

In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security. When changing their two factor a

In Zammad 6.4.x before 6.4.2, SSRF can occur. Authenticated admin users can enable webhooks in Zammad, which are trigger

In Zammad 6.4.x before 6.4.2, an authenticated agent with knowledge base permissions was able to use the Zammad API to f

Net::Xero 0.044 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptograph

WebService::Xero 0.11 and earlier for Perl uses the rand() function as the default source of entropy, which is not crypt

Net::Dropbox::API 1.9 and earlier for Perl uses the rand() function as the default source of entropy, which is not crypt

Web::API 2.8 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographica

Amon2::Auth::Site::LINE uses the String::Random module to generate nonce values.  String::Random defaults to Perl's bui

A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type bu

A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this

A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0. This issue

The MultiVendorX – Empower Your WooCommerce Store with a Dynamic Multivendor Marketplace – Build the Next Amazon, eBay,

The Lafka Plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_opti