2025

The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is

The The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inclu

The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and inclu

Inclusion of undocumented features issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. A remote attacker may di

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmwa

A vulnerability was found in `podman build` and `buildah.` This issue occurs in a container breakout by using --jobs=2 a

With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This i

In DGifSlurp of dgif_lib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remot

In growData of Parcel.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mit

In onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an app with notification ac

In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities

In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This coul

In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a devic

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user c

In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected

In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This cou

In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This co

In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This cou

In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This co

In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in

A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Serv

A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service

A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co

A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to co

In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permiss

A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 084

Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-

A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8

A code injection vulnerability exists in the Ambari Alert Definition feature, allowing authenticated users to inject an

An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie project, allowing an attacker to inject malicious

A remote code injection vulnerability exists in the Ambari Metrics and AMS Alerts feature, allowing authenticated users

A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2

Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows

A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devi

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Install). The supported ver

Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component: Agile Integration Services).

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported versi

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch). Supported