Archive
3 August 2026
Vulnerabilities first published on this day (UTC), newest first.
128 results · Clear filters · Feed
-
Medium 6.5
Contest Gallery < 30.0.7 - Author+ Arbitrary Post Deletion via post_cg_youtube_delete_from_library
The Contest Gallery WordPress plugin before 30.0.7 does not perform per-object capability or nonce checks in one of its post-deletion handlers, gating it only by a coarse role-membership test, which allows any Author-level or higher user to permanently delete…
-
Medium 6.5
Simply Schedule Appointments < 1.6.12.11 - Contributor+ Sensitive Data Disclosure via Admin Shortcode
The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does not perform a capability check on an administrative appointment-listing shortcode, and its per-user result scoping fails open for non-staff users, allowing users with the Contributor role…
-
Medium 4.3
GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element is the function nas-web.get_file_list of the component APPS-NAS Module. Performing a manipul…
-
Medium 5.4
GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to improper authorization. The attack …
-
Medium 5.3
mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
A weakness has been identified in mz-automation libiec61850 up to 1.6.1. This issue affects the function checkDataSetAccess of the file src/iec61850/server/mms_mapping/mms_mapping.c of the component MMS Request Handler. This manipulation causes out-of-bounds …
-
Medium 5.5
Gimp: gimp: remote code execution via crafted paa file
A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted PAA (Paint Shop Pro Array) image file. This vulnerability, a heap-based out-of-bounds write in the decode_lzss() function of the PAA file format…
-
Medium 5.5
Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk
A flaw was found in GIMP's file-png plugin. A remote attacker can exploit this by crafting a malicious Animated Portable Network Graphics (APNG) image containing an oversized tRNS chunk. This can lead to a stack-based buffer overflow (CWE-121), causing the fi…
-
Medium 5.3
PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS)
In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption KDF iteration-count bound (DoS). This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.…
-
Medium 5.3
BCFKS keystore load honours unbounded KDF cost from untrusted file
In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2…
-
Medium 6.0
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local e…
-
Medium 4.4
In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
Medium 5.5
In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serv…
-
Medium 5.5
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial…
-
Medium 5.5
In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of se…
-
Medium 4.4
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servi…
-
Medium 4.4
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information…
-
Medium 4.4
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalatio…
-
Medium 6.0
In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 4.4
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local informat…
-
Medium 6.2
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local in…
-
Medium 6.5
In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/ad…
-
Medium 6.0
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.0
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 5.5
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of…
-
Medium 5.5
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of…
-
Medium 6.0
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 5.5
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servi…
-
Medium 6.0
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 6.0
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of…
-
Medium 6.0
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privile…
-
Medium 4.4
In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of servi…
-
Medium 4.6
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of servic…
-
Medium 5.8
In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local …
-
Medium 6.0
In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of…
-
Medium 6.0
In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati…
-
Medium 6.1
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escala…
-
Medium 6.5
In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalati…
-
Medium 5.3
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The man…