Archive
6 August 2025
Vulnerabilities first published on this day (UTC), newest first.
67 results · Clear filters · Feed
-
High 8.8
SuiteCRM: Authenticated Blind SQL Injection in InboundEmail module
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions and below, the InboundEmail module allows the arbitrary execution of queries in the backend database, leading to SQL injection. This can have…
-
High 8.8
SuiteCRM is Vulnerable to PHP Object Injection in Reports
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. In versions 7.14.6 and 8.8.0, user-supplied input is not validated/sanitized before it is passed to the unserialize function, which could lead to penetra…
-
High 8.7
Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect Advanced
Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API. The session IDs are generated using a predictable method based on the current timestamp, allowing attackers to recreate valid session IDs. When combined with the abi…
-
High 7.8
TGA File Parsing Memory Corruption Vulnerability
A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
RBG File Parsing Out-of-Bounds Write Vulnerability
A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the cu…
-
High 8.7
Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect Advanced
Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution due to improper handling of user input. When used with default credentials, this en…
-
High 7.5
Denial of service via malicious preflight requests in github.com/rs/cors
Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue loa…
-
High 7.8
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissi…
-
High 8.0CVE-2025-53786 Public exploit
Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability
On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following fur…
-
High 8.1
IBM Tivoli Monitoring code execution
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
-
High 8.1
IBM Tivoli Monitoring code execution
IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocat…
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer …
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer …
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolle…
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overf…
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overf…
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a dou…
-
High 7.5
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero…
-
High 7.5CVE-2025-23320 Public exploit
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker …
-
High 8.1
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker …
-
High 8.1
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker …
-
High 7.5
-
High 8.8
-
High 8.8
-
High 7.3
OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions p…
-
High 8.7CVE-2025-7771 Public exploit
Code Execution / Escalation of Privileges in ThrottleStop
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the ru…
-
High 7.5
Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Display
Memory corruption while processing simultaneous requests via escape path.
-
High 7.8
Improper Validation of Array Index in Bluetooth HOST
Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while creating NDP instance.
-
High 7.3
Buffer Copy Without Checking Size of Input in Powerline Communication Firmware
Memory corruption while processing specific files in Powerline Communication Firmware.
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption while processing DDI command calls.
-
High 7.8
Buffer Over-read in Camera
Memory corruption while processing an IOCTL command with an arbitrary address.
-
High 7.8
Improper Validation of Array Index in DSP Service
Memory corruption while processing DDI call with invalid buffer.
-
High 7.5
Reachable Assertion in WLAN Firmware
Transient DOS while processing an ANQP message.
-
High 7.5
Buffer Over-read in WLAN Firmware
Transient DOS while processing a frame with malformed shared-key descriptor.
-
High 7.8
Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access.
-
High 7.5
Improper Input Validation in Modem
Transient DOS while processing CCCH data when NW sends data with invalid length.
-
High 7.8
Use After Free in BTHOST
Memory corruption while processing commands from A2dp sink command queue.