Archive
6 August 2025
Vulnerabilities first published on this day (UTC), newest first.
217 results · Feed
-
High 7.8
Use After Free in NPU
Memory corruption while processing IOCTL command when multiple threads are called to map/unmap buffer concurrently.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux
Memory corruption while submitting blob data to kernel space though IOCTL.
-
High 7.5
Reachable Assertion in Modem
Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network.
-
Medium 6.0
Race Condition in Shopware Voucher Submission
A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.
-
Medium 6.4
Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocks
The Gutenverse plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Fun Fact blocks in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escaping on user supplied attribu…
-
Medium 5.9
Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS
Windows Shortcut Following (.LNK) vulnerability in multiple processes of Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3 and prior, Mitsubishi Electric MobileHMI versions 10.97.3 and prior, Mitsubis…
-
Low 3.3
Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access s…
-
Low 3.3
Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sen…
-
Low 3.3
Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive …
-
Medium 5.7
Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attacker…
-
Medium 5.7
Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged …
-
Medium 5.5
Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung H…
-
Medium 4.4
Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bo…
-
Medium 6.3
Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged at…
-
Medium 4.3
Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 all…
-
Medium 4.0
Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document …
-
Medium 4.3
Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attacker…
-
Medium 6.2
Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to …
-
Medium 5.5
Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to mo…
-
Medium 5.5
Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to …
-
Medium 6.0
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to de…
-
Medium 4.0
Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to acces…
-
Critical 9.8
Reveal Listing <= 3.3 - Unauthenticated Privilege Escalation
The Reveal Listing plugin by smartdatasoft for WordPress is vulnerable to privilege escalation in versions up to, and including, 3.3. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'listing_user…
-
Medium 6.4
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all versions up to, and including, 28.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated att…
-
Medium 6.4
Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown
The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget in all versions up to, and including, 2.7.9.4 due to insufficient input sanitization and output escaping. This makes it possible for …
-
Medium 5.4
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content' parameter in versions up to, and including, 8.1.5 due to insufficient input sanitization and output escaping. This makes…
-
Medium 4.8
Race condition vulnerability in the kernel hufs module. Impact: Successful exploitation of this vulnerability may affec…
-
Medium 4.2
Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vuln…
-
Medium 4.5
Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation …
-
Medium 5.4
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of …
-
Medium 5.4
Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack. Impact: Successful exploitation of …
-
Medium 5.1
Vulnerability of inadequate packet length check in the BLE module. Impact: Successful exploitation of this vulnerabilit…
-
Medium 5.0
Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successf…
-
Medium 6.6
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 6.6
Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module. Impact: Succ…
-
Medium 6.7
Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful ex…
-
Medium 6.7
Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful…
-
Medium 5.5
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may ca…
-
Medium 5.5
ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may ca…
-
Medium 5.5
Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability …