Archive
6 August 2025
Vulnerabilities first published on this day (UTC), newest first.
136 results · Clear filters · Feed
-
Medium 6.2
Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to …
-
Medium 5.5
Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to mo…
-
Medium 5.5
Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to …
-
Medium 6.0
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to de…
-
Medium 4.0
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to acces…
-
Medium 6.4
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all versions up to, and including, 28.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…
-
Medium 6.4
Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget in all versions up to, and including, 2.7.9.4 due to insufficient input sanitization and output escaping. This makes it possible for …
-
Medium 5.4
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content' parameter in versions up to, and including, 8.1.5 due to insufficient input sanitization and output escaping. This makes…
-
Medium 4.8
Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affec…
-
Medium 4.2
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vuln…
-
Medium 4.5
Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation …
-
Medium 5.4
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of …
-
Medium 5.4
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of …
-
Medium 5.1
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerabilit…
-
Medium 5.0
Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successf…
-
Medium 6.6
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 6.6
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 6.7
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful ex…
-
Medium 6.7
Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful…
-
Medium 5.5
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may ca…
-
Medium 5.5
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may ca…
-
Medium 5.5
Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability …
-
Medium 4.4
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 4.4
Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successf…
-
Medium 5.9
Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation o…
-
Medium 4.3
Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
The Zakra theme for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.1.5. This makes it possible for authenticated attackers, wi…
-
Medium 6.7
Out-of-bounds read vulnerability in the register configuration of the DMA module. Impact: Successful exploitation of th…
-
Medium 6.8
Vulnerability of insufficient data length verification in the HVB module. Impact: Successful exploitation of this vulne…
-
Medium 6.7
Vulnerability of insufficient data length verification in the partition module. Impact: Successful exploitation of this…
-
Medium 6.8
:Vulnerability of insufficient data length verification in the DFA module. Impact: Successful exploitation of this vuln…
-
Medium 6.7
Race condition issue occurring in the physical page import process of the memory management module. Impact: Successful …
-
Medium 5.3
Vulnerability of incomplete verification information in the communication module. Impact: Successful exploitation of th…
-
Medium 6.7
Race condition vulnerability in the kernel file system module. Impact: Successful exploitation of this vulnerability ma…
-
Medium 4.4
Pointer dangling vulnerability in the cjwindow module. Impact: Successful exploitation of this vulnerability may affect…
-
Medium 5.7
Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnera…
-
Medium 6.4
WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. …
-
Medium 6.5
FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injection
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of su…
-
Medium 6.4
Flex Guten <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
The Flex Guten plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘thumbnailHoverEffect’ parameter in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authen…
-
Medium 6.4
WP Tournament Registration <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via field Parameter
The WP Tournament Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘field’ parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authe…
-
Medium 6.4
esri-map-view <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via esri-map-view Shortcode
The esri-map-view plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's esri-map-view shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. Th…