2025

In GetCellInfoList() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. Th

In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to a

In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This coul

In wbrc_bt_dev_write of wb_regon_coordinator.c, there is a possible out of bounds write due to a buffer overflow. This c

there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with

In sms_DisplayHexDumpOfPrivacyBuffer of sms_Utilities.c, there is a possible out of bounds read due to an incorrect boun

In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validat

In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow

there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of priv

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been rated as crit

A vulnerability was found in code-projects Online Shop 1.0. It has been declared as problematic. This vulnerability affe

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0. It has been classified as

In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallat

In skia_alloc_func of SkDeflate.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In prepare_to_draw_into_mask of SkBlurMaskFilterImpl.cpp, there is a possible heap overflow due to improper input valida

In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to partially bypass lock screen. This could l

In multiple locations, there is a possible way to avoid unbinding of a service from the system due to a logic error in t

In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer overflow. This could lead

In DevmemValidateFlags of devicemem_server.c , there is a possible out of bounds write due to memory corruption. This co

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the

A vulnerability was found in SourceCodester Online Eyewear Shop 1.0 and classified as critical. Affected by this issue i

phpMyFAQ is an open source FAQ web application. Starting no later than version 3.2.10 and prior to version 4.0.2, an att

Tokens in CTFd used for account activation and password resetting can be used interchangeably for these operations. When

While assignment of a user to a team (bracket) in CTFd should be possible only once, at the registration, a flaw in log

A vulnerability has been found in code-projects Chat System 1.0 and classified as critical. Affected by this vulnerabili

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance

Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (W

Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are aff

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protec

Kentico CMS in version 7 is vulnerable to a Reflected XSS attacks through manipulation of a specific GET request parame

Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP.This issue affects GiveWP: from n/a through 2.25.1.

Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Contr

Missing Authorization vulnerability in WeyHan Ng Post Teaser.This issue affects Post Teaser: from n/a through 4.1.5.

A vulnerability, which was classified as critical, was found in code-projects Chat System 1.0. Affected is an unknown fu

MaxKB, which stands for Max Knowledge Base, is an open source knowledge base question-answering system based on a large

Sensitive information disclosure due to missing authentication. The following products are affected: Acronis True Image

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True I

Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C

Missing Authorization vulnerability in Porto Theme Porto Theme - Functionality porto-functionality allows Exploiting Inc

Missing Authorization vulnerability in 10Web 10WebAnalytics wd-google-analytics allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in LuckyWP LuckyWP Scripts Control luckywp-scripts-control allows Exploiting Incorre

Missing Authorization vulnerability in IDX IMPress Listings allows Exploiting Incorrectly Configured Access Control Secu

Missing Authorization vulnerability in 10Web 10Web Map Builder for Google Maps allows Exploiting Incorrectly Configured

Missing Authorization vulnerability in Putler / Storeapps Putler Connector for WooCommerce.This issue affects Putler Con

Missing Authorization vulnerability in Repute InfoSystems ARMember Premium allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in Xtemos WoodMart allows Exploiting Incorrectly Configured Access Control Security