Archive
3 June 2025
Vulnerabilities first published on this day (UTC), newest first.
53 results · Clear filters · Feed
-
Medium 6.6
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while handling test pattern generator IOCTL command.
-
Medium 6.6
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing I2C settings in Camera driver.
-
Medium 6.6
Use After Free in Computer Vision
Memory corruption while processing IOCTL command to handle buffers associated with a session.
-
Medium 6.6
Buffer Copy Without Checking Size of Input in Audio
Memory corruption may occur while processing voice call registration with user.
-
Medium 5.1
In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.1
In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of …
-
Medium 5.9CVE-2025-31710 Public exploit
In engineermode service, there is a possible command injection due to improper input validation. This could lead to loc…
-
Medium 4.3
Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View
The Broken Link Checker plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check on the ajax_full_status and ajax_dashboard_status functions in all versions up to, and including, 2.4.4. This makes it possible for authen…
-
Medium 5.6
Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 via deserialization of untrusted input from the args[callback] parameter . This makes it possible for unauthenti…
-
Medium 5.4
Erupt Unrestricted Upload of File with Dangerous Type vulnerability
An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.
-
Medium 6.5
An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Foc…
-
Medium 4.6
An issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded key, making it easier t…
-
Medium 6.1
Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter in SettingController (…