HIGH Severity CVEs

Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable es

Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to potent

Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to p

Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentially

Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an unauthenticated u

Exposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to poten

Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX ma

Time-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to p

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SG

Path traversal for some Intel(R) Extension for Transformers software before version 1.5 may allow an authenticated user

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prev

In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission

In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to an

In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled access

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocki

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a lo

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization.

In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a mi

In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due

In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a lo

In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This c

In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to

In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local esca

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This

In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lea

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This

In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the

The transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not properly handle errors, p

Craft is a content management system (CMS). The dataUrl function can be exploited if an attacker has write permissions o

Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system v

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a p

Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subj

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an

FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Any user with view right on XWiki.PDFViewerService

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. The PDF Viewer macro allows an attacker to view an

Craft is a content management system (CMS). Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function Fi

A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attacker

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote atta

In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an i

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a stack overflow via the formSetPortMapping function.

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetDebugCfg function.

Tenda G3 v3.0 v15.11.0.20 was discovered to contain a command injection vulnerability via the formSetUSBPartitionUmount

A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacke

A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4

Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously fre

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive re

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a