2025

An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12.17.0 allows attackers to obtain sensiti

The com.asianmobile.callcolor (aka Color Phone Call Screen App) application through 24 for Android enables any applicati

The com.callos14.callscreen.colorphone (aka iCall OS17 - Color Phone Flash) application through 4.3 for Android enables

The com.callerscreen.colorphone.themes.callflash (aka Color Call Theme & Call Screen) application through 1.0.7 for Andr

Redis is an open source, in-memory database that persists on disk. An authenticated with sufficient privileges may creat

Grocy through 4.3.0 allows remote attackers to obtain sensitive information via direct requests to pages that are not sh

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality uti

A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attacke

A cross-site scripting (XSS) vulnerability in Grav v1.7.45 allows attackers to execute arbitrary web scripts or HTML via

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Pr

A reflected Cross-Site Scripting (XSS) vulnerability exists in the login page of IceHRM v32.4.0.OS. The vulnerability is

AAT (Another Activity Tracker) is a GPS-tracking application for tracking sportive activities, with emphasis on cycling.

In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value i

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_xdmac: avoid null_prt_deref in at_xdm

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent bad count for tracing_cpumask_writ

In the Linux kernel, the following vulnerability has been resolved: x86/fred: Clear WFE in missing-ENDBRANCH #CPs An i

In the Linux kernel, the following vulnerability has been resolved: PCI/MSI: Handle lack of irqdomain gracefully Alexa

In the Linux kernel, the following vulnerability has been resolved: btrfs: check folio mapping after unlock in relocate

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerab

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentiall

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggerin

Open Redirect vulnerability in Pnetlab 5.3.11 allows an attacker to manipulate URLs to redirect users to arbitrary exter

Cross-Site Scripting (XSS) vulnerability in Pnetlab 5.3.11 allows an attacker to inject malicious scripts into a web pag

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

information disclosure while invoking the mailbox read API.

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel

Memory corruption while processing frame command IOCTL calls.

Memory corruption while invoking IOCTL calls to unmap the DMA buffers.

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,

Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size.

The Email Subscribers by Icegram Express WordPress plugin before 5.7.44 does not sanitize and escape a parameter before

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which cou

The Pods WordPress plugin before 3.2.8.1 does not sanitise and escape some of its settings, which could allow high priv

The tourmaster WordPress plugin before 5.3.4 does not sanitise and escape some parameters when outputting them in the pa

In wlan STA driver, there is a possible reachable assertion due to improper exception handling. This could lead to local

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the functi

A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEd

A vulnerability was found in Codezips Blood Bank Management System 1.0 and classified as critical. Affected by this issu

A vulnerability has been found in Codezips Gym Management System 1.0 and classified as critical. Affected by this vulner

A vulnerability, which was classified as critical, was found in code-projects Responsive Hotel Site 1.0. Affected is an