Archive
6 August 2025
Vulnerabilities first published on this day (UTC), newest first.
67 results · Clear filters · Feed
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.
-
High 7.8
Out-of-bounds Write in Camera_Linux
Memory corruption when programming registers through virtual CDM.
-
High 7.8
Use After Free in NPU
Memory corruption when IOCTL interface is called to map and unmap buffers simultaneously.
-
High 7.8
Use After Free in NPU
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption while submitting blob data to kernel space though IOCTL.
-
High 7.5
Reachable Assertion in Modem
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
-
High 8.1
Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution
Multiple plugins for WordPress by emarket-design with the 'emd-form-builder-lite' package are vulnerable to Remote Code Execution in various versions via the emd_form_builder_lite_pagenum function. This is due to the plugin not properly validating user input …
-
High 8.0
Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of…
-
High 8.8
Out-of-bounds write vulnerability in the skia module. Impact: Successful exploitation of this vulnerability may affect …
-
High 7.5
CleverReach WP <= 1.5.20 - Unauthenticated SQL Injection via title Parameter
The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all versions up to, and including, 1.5.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the exi…
-
High 8.3
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulner…
-
High 8.8
Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability
Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploi…
-
High 8.8
Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability
Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR. Authentication is not required to ex…
-
High 7.3
EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability…
-
High 7.7
Authentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may…
-
High 7.3
Status verification vulnerability in the lock screen module. Impact: Successful exploitation of this vulnerability will…
-
High 8.1
Race condition vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affec…
-
High 8.4
Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affec…
-
High 8.4
Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affec…
-
High 8.1
A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plu…
-
High 7.5
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external H…
-
High 7.0
poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that ke…
-
High 7.6
Cross-site scripting (XSS) vulnerability in Zone Bitaqati thru 3.4.0.
-
High 8.2
An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write …
-
High 7.5
Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Datab…
-
High 8.6
Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 20…
-
High 7.5CVE-2025-51040 Public exploit
Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html en…