Archive
6 May 2025
Vulnerabilities first published on this day (UTC), newest first.
56 results · Clear filters · Feed
-
Medium 5.3
Recording
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. There is no visible indication when the system is recording and recording can be enabled remotely via a network API. This issue affec…
-
Medium 5.1
Enable Debug Images
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Crestron Automate VX allows Functionality Misuse. When Enable Debug Images in Crestron Automate VX is active, snapshots of the captured video or portions thereof are stored locally on…
-
Medium 6.9CVE-2025-4388 Scanner template
Liferay Portal Reflected XSS in marketplace-app-manager-web
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92…
-
Medium 6.5
Logstash Improper Certificate Validation in TCP output
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set.
-
Medium 5.3
Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
Umbraco is a free and open source .NET content management system. Prior to versions 10.8.10 and 13.8.1, based on an analysis of the timing of post login API responses, it's possible to determine whether an account exists. The issue is patched in versions 10.8…
-
Medium 4.6
Finit has heap based buffer overwrite in urandom.so plugin
Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is ena…
-
Medium —
tanton_engine has unsound public API
The following functions in the `tanton_engine` crate are unsound due to lack of sufficient boundary checks in public API: - `Stack::offset()` - `ThreadStack::get()` - `RootMoveList::insert_score_depth()` - `RootMoveList::insert_score()` The tanton_engine crat…
-
Medium 5.3
@misskey-dev/summaly allows IP Filter Bypass via Redirect
### Summary Due to a validation error in `got.scpaping`, it is possible to use an HTTP redirect to avoid IP filtering. ### Details In `got.scpaping`, Summaly first makes a HTTP `HEAD` request to the page being summarized. It then preforms private IP address c…
-
Medium 5.5
Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Neutralization of Special Elemen…
-
Medium 6.0
Certificate validity not properly verified
The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client certificate reduces the …
-
Medium 6.5
Quay: incorrect privilege assignment
A flaw was found in Quay. When an organization acts as a proxy cache, and a user or robot pulls an image that hasn't been mirrored yet, they are granted "Admin" permissions on the newly created repository.
-
Medium 4.8
Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unichar
A flaw was found in GLib, which is vulnerable to an integer overflow in the g_string_insert_unichar() function. When the position at which to insert the character is large, the position will overflow, leading to a buffer underwrite.
-
Medium 4.7CVE-2025-4357 EPSS 16%
Tenda RX3 telnet command injection
A vulnerability was found in Tenda RX3 16.03.13.11_multi. It has been rated as critical. This issue affects some unknown processing of the file /goform/telnet. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has …
-
Medium 6.3
Brilliance Golden Link Secondary System queryTsDictionaryType.htm sql injection
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to sql…
-
Medium 6.3
Brilliance Golden Link Secondary System tcEntrFlowSelect.htm sql injection
A vulnerability, which was classified as critical, has been found in Brilliance Golden Link Secondary System up to 20250424. This issue affects some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the argument custTra…
-
Medium 6.4
Cision Block <= 4.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
The Cision Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 4.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker…
-
Medium 6.6
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio
Memory corruption while processing an IOCTL call to set mixer controls.
-
Medium 6.7
Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Camera
Memory corruption can occur during context user dumps due to inadequate checks on buffer length.
-
Medium 6.6
Use After Free in Secure Processor
Memory corruption while handling multiple IOCTL calls from userspace to operate DMA operations.
-
Medium 6.6
Out-of-bounds Write in Audio
Memory corruption while sound model registration for voice activation with audio kernel driver.
-
Medium 6.6
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption may occur during IO configuration processing when the IO port count is invalid.
-
Medium 6.7
Buffer Over-read in Camera Driver
Memory corruption due to improper bounds check while command handling in camera-kernel driver.
-
Medium 6.6
Out-of-bounds Write in Camera Driver
Memory corruption while handling schedule request in Camera Request Manager(CRM) due to invalid link count in the corresponding session.
-
Medium 6.6
Use After Free in HLOS
Memory corruption during concurrent access to server info object due to unprotected critical field.
-
Medium 6.3CVE-2025-4341 EPSS 24%
D-Link DIR-880L Request Header ssdpcgi sub_16570 command injection
A vulnerability classified as critical was found in D-Link DIR-880L up to 104WWb01. Affected by this vulnerability is the function sub_16570 of the file /htdocs/ssdpcgi of the component Request Header Handler. The manipulation of the argument HTTP_ST/REMOTE_A…
-
Medium 5.4
Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting
An low privileged remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into several fields of the configuration webpage with limited impact.
-
Medium 6.3
D-Link DIR-890L/DIR-806A1 soap.cgi sub_175C8 command injection
A vulnerability classified as critical has been found in D-Link DIR-890L and DIR-806A1 up to 100CNb11/108B03. Affected is the function sub_175C8 of the file /htdocs/soap.cgi. The manipulation leads to command injection. It is possible to launch the attack rem…
-
Medium 6.3
feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload
A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm up to 0.0.1. It has been classified as critical. This affects the function uploadFile of the file src/main/java/com/megagao/production/ssm/service/impl/FileServiceImpl.java. The manipu…
-
Medium 5.3
User Registration & Membership – Custom Registration Form, Login Form, and User Profile <= 4.2.1 - Insecure Direct Object Reference to Unauthenticated Limited User Deletion
The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.2.1 via the create_stripe_subscription() function, due t…
-
Medium 5.1
Process residence vulnerability in abnormal scenarios in the print module Impact: Successful exploitation of this vulne…
-
Medium 4.4
Null pointer dereference vulnerability in the USB HDI driver module Impact: Successful exploitation of this vulnerabili…
-
Medium 6.2
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability…
-
Medium 6.3
Bypass vulnerability in the network search instruction authentication module Impact: Successful exploitation of this vu…
-
Medium 4.4
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will …
-
Medium 4.4
Vulnerability of unauthorized access in the app lock module Impact: Successful exploitation of this vulnerability will …
-
Medium 6.2
Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of thi…
-
Medium 6.2
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may …
-
Medium 5.1
Permission control vulnerability in the contacts module Impact: Successful exploitation of this vulnerability may affec…
-
Medium 4.3
74CMS index path traversal
A vulnerability was found in 74CMS up to 3.33.0. It has been rated as problematic. Affected by this issue is the function index of the file /index.php/index/download/index. The manipulation of the argument url leads to path traversal. The attack may be launch…
-
Medium 4.3
MRCMS cross-site request forgery
A vulnerability was found in MRCMS 3.1.2. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public …