2025

In the Airoha Bluetooth audio SDK, there is a possible permission bypass that allows access critical data of RACE protoc

Out-of-bounds write vulnerability exists in FUJIFILM Business Innovation MFPs. A specially crafted IPP (Internet Printin

/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri

The gh package before 1.5.0 for R delivers an HTTP response in a data structure that includes the Authorization header f

A vulnerability, which was classified as problematic, was found in Caixin News App 8.0.1 on Android. Affected is an unkn

A vulnerability, which was classified as problematic, has been found in TVB Big Big Shop App 2.9.0 on Android. This issu

A vulnerability classified as problematic was found in Portabilis i-Diario 1.5.0. This vulnerability affects unknown cod

A vulnerability classified as problematic has been found in Portabilis i-Educar 2.10. This affects the function Gerar of

A vulnerability was found in Portabilis i-Educar 2.9. It has been rated as problematic. Affected by this issue is some u

A vulnerability was found in Portabilis i-Educar 2.9. It has been declared as problematic. Affected by this vulnerabilit

Missing Origin Validation in WebSockets vulnerability in Apache Zeppelin. The attacker could access the Zeppelin server

A vulnerability was found in Portabilis i-Educar 2.9. It has been classified as problematic. Affected is an unknown func

Improper Input Validation vulnerability in Apache Zeppelin. The fix for JDBC URL validation in CVE-2024-31864 did not ac

Incomplete Blacklist to Cross-Site Scripting vulnerability in Apache Zeppelin. This issue affects Apache Zeppelin: befo

A vulnerability was found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as problema

A vulnerability has been found in 495300897 wx-shop up to de1b66331368695779cfc6e4d11a64caddf8716e and classified as pro

A vulnerability, which was classified as critical, was found in code-projects Kitchen Treasure 1.0. This affects an unkn

A vulnerability, which was classified as critical, has been found in code-projects Online Medicine Guide 1.0. Affected b

A vulnerability classified as critical was found in code-projects Online Medicine Guide 1.0. Affected by this vulnerabil

A vulnerability classified as problematic has been found in code-projects Human Resource Integrated System 1.0. Affected

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This iss

A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerabili

A security vulnerability has been detected in code-projects Online Medicine Guide 1.0. This vulnerability affects unknow

A weakness has been identified in code-projects Online Medicine Guide 1.0. This affects an unknown part of the file /cus

A vulnerability has been found in projectworlds Online Admission System 1.0 and classified as critical. Affected by this

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title upon calendar import.

The Mocca Calendar application before 2.15 for XWiki allows XSS via a title to the view event page.

The Mocca Calendar application before 2.15 for XWiki allows XSS via the background or text color field.

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. A

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authenti

In iperf before 3.19.1, iperf_auth.c has an off-by-one error and resultant heap-based buffer overflow.

A vulnerability, which was classified as critical, has been found in code-projects Intern Membership Management System 1

OpenNebula Community Edition (CE) before 7.0.0 and Enterprise Edition (EE) before 6.10.3 have a critical FireEdge race c

A vulnerability classified as critical was found in code-projects Intern Membership Management System 1.0. This vulnerab

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a guest could get global GPU metrics whi

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resou

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause a stack bu

A flaw was found in the Linux kernel's ksmbd component. A memory leak can occur if a client sends a session setup reques

A flaw was found in the Linux kernel's ksmbd component. A deadlock is triggered by sending multiple concurrent session s

NVIDIA GPU Display Driver for Windows contains a vulnerability  where an attacker may cause an exposure of sensitive sys

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may access sensitive system-level infor

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an attacker could read invalid memory. A

NVIDIA vGPU software for Linux-style hypervisors contains a vulnerability in the Virtual GPU Manager, where a malicious

NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker with local unprivileged access that can

NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to esc

NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker might cause an improper index val