Archive
7 April 2025
Vulnerabilities first published on this day (UTC), newest first.
51 results · Clear filters · Feed
-
Medium 4.3
hailey888 oa_system Frontend LoginsController.java loginCheck cross site scripting
A vulnerability classified as problematic was found in hailey888 oa_system up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the…
-
Medium 6.9
ts-asn1-der has Incorrect DER Encoding of Numbers Leading to Denial of Service and Incorrect Value Representation
ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 2**31 -- 2**32 - 1. The arithmetic in the numBitLen didn't take into account t…
-
Medium 6.3
joey-zhou xiaozhi-esp32-server-java update sql injection
A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument stat…
-
Medium 6.3
zhangyanbo2007 youkefu File Upload WebIMController.java path traversal
A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown part of the file WebIMController.java of the component File Upload. The manipulation of the argument ID leads to path traversal. It is possib…
-
Medium 4.6
Out-of-bounds Read in HashPeImageByType()
EDK2 contains a vulnerability in the HashPeImageByType(). A user may cause a read out of bounds when a corrupted data pointer and length are sent via an adjecent network. A successful exploit of this vulnerability may lead to a loss of Integrity and/or Availa…
-
Medium 6.8
Jujutsu does not have SHA-1 collision detection
### Summary Jujutsu 0.28.0 and earlier rely on versions of gitoxide that use SHA-1 hash implementations without any collision detection, leaving them vulnerable to hash collision attacks. ### Details This is a result of the underlying [CVE-2025-31130 / GHSA-2…
-
Medium 6.9
estree-util-value-to-estree allows prototype pollution in generated ESTree
estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in …
-
Medium 4.8
tarteaucitron.js allows url scheme injection via unfiltered inputs
tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges (access to the site's source code or a CMS plugin) to enter a URL containing an insecure scheme such as java…
-
Medium 5.5
tarteaucitron.js allows prototype pollution via custom text injection
tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the addOrUpdate function, used for applying custom texts, did not properly validate input. This allowed an attacker with di…
-
Medium 5.5
tarteaucitron.js allows UI manipulation via unrestricted CSS injection
tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where user-controlled inputs for element dimensions (width and height) were not properly validated. This allowed an attacker with…
-
Medium 6.5
Graylog Authenticated HTTP inputs do ingest message even if Authorization header is missing or has wrong value
Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing hea…
-
Medium 6.2
Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution
A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an…
-
Medium 6.3
xxyopen Novel-Plus list sql injection
A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be laun…
-
Medium 6.2
Gnuplot: segmentation fault via io_str_init_static_internal function
A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.
-
Medium 5.9
Mali GPU Userspace Driver allows an Out-of-Bounds access
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to …
-
Medium 6.3
code-projects Patient Record Management System edit_dpatient.php sql injection
A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /edit_dpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initi…
-
Medium 5.5
Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform
Information disclosure may be there when a guest VM is connected.
-
Medium 6.7
Use After Free in DSP Service
Memory corruption while processing multiple IOCTL calls from HLOS to DSP.
-
Medium 6.5
Improper Access Control for Register Interface in TZ Firmware
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.
-
Medium 6.2
Weak Authentication in HLOS
Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.
-
Medium 6.6
Use After Free in Data Network Stack & Connectivity
Memory corruption while processing IOCTL calls to add route entry in the HW.
-
Medium 6.6
Out-of-bounds Write in Audio
Memory corruption while accessing MSM channel map and mixer functions.
-
Medium 6.6
Use After Free in HLOS
Memory corruption while invoking IOCTL map buffer request from userspace.
-
Medium 5.5
Information Exposure in TZ Secure OS
There may be information disclosure during memory re-allocation in TZ Secure OS.
-
Medium 6.3
code-projects Patient Record Management System dental_pending.php sql injection
A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_pending.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate t…
-
Medium 6.8
Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service…
-
Medium 6.8
File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vuln…
-
Medium 4.0
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this …
-
Medium 4.0
Buffer overflow vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this …
-
Medium 5.3
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this v…
-
Medium 4.6
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 4.6
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 4.6
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 4.6
Buffer overflow vulnerability in the codec module Impact: Successful exploitation of this vulnerability may affect avai…
-
Medium 6.7
In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalat…
-
Medium 6.7
In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalat…
-
Medium 6.7
In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalat…
-
Medium 6.5
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…
-
Medium 6.0
In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if…
-
Medium 6.7
In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of…