2025

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This ma

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.12 are af

A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T tel

Barix Instreamer v04.06 and v04.05 contains a stored cross-site scripting (XSS) vulnerability in the Web UI Configuratio

A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3. An authen

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to rec

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not va

Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary te

Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only

Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corru

SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management Sy

In multiple locations of UsbDataAdvancedProtectionHook.java, there is a possible way to access USB data when the screen

In isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a missing permission check

In preparePackage of InstallPackageHelper.java, there is a possible way for an app to appear hidden upon installation wi

In multiple locations, there is a possible permanent denial of service due to resource exhaustion. This could lead to lo

A vulnerability was found in Jihai Jshop MiniProgram Mall System 2.9.0. Affected by this issue is some unknown functiona

A vulnerability has been found in itsourcecode Student Management System 1.0. Affected by this vulnerability is an unkno

A lack of file name validation or verification in the Attachment service of usememos memos v0.25.2 allows attackers to e

Incorrect access control in the Identity Provider service of usememos memos v0.25.2 allows attackers with low-level priv

Incorrect access control in the /api/v1/user endpoint of usememos memos v0.25.2 allows unauthorized attackers to create

Authenticated append-style command-injection Ruijie APs (AP_RGOS 11.1.x) allows an authenticated web user to execute app

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit

A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patche

In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking

In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to improper input validation. This could

In multiple functions of mem_protect.c, there is a possible out of bounds write due to an integer overflow. This could l

In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisio

In setDisplayName of AssociationRequest.java, there is a possible way to cause CDM associations to persist after the use

In onHeaderDecoded of LocalImageResolver.java, there is a possible persistent denial of service due to resource exhausti

In findAvailRecognizer of VoiceInteractionManagerService.java, there is a possible way to become the default speech reco

In validateIconUserBoundary of PrintManagerService.java, there is a possible cross-user image leak due to a confused dep

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to launch an activity from the

In multiple locations, there is a possible way to launch an application from the background due to a precondition check

In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This c

In init_pkvm_hyp_vcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could le

In ProcessArea of dng_misc_opcodes.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead

In DefaultTransitionHandler.java, there is a possible way to enable a tapjacking attack due to a insecure default. This

In onSomePackagesChanged of VoiceInteractionManagerService.java, there is a possible way for a third party application's

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to

In getComponentName of MediaButtonReceiverHolder.java, there is a possible desync in persistence due to resource exhaust

In rebootWipeUserData of RecoverySystem.java, there is a possible way to factory reset the device while in DSU mode due

In setDefaultKey of DefaultPaymentSettings.java, there is a possible way for an application to set the main user's defau

In __pkvm_guest_relinquish_to_host of mem_protect.c, there is a possible configuration data leak due to a logic error in

In multiple locations, there is a possible way to create a large amount of app ops due to a logic error in the code. Thi

In multiple locations, there is a possible way to read files from another user due to a missing permission check. This c

In InputMethodInfo of InputMethodInfo.java, there is a possible permanent denial of service due to resource exhaustion.

In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead

In multiple files, there is a possible way to reveal information across users due to a missing permission check. This co

In multiple functions of WifiScanModeActivity.java, there is a possible way to bypass a device config restriction due to