2025

Improper URL input validation vulnerability in Samsung Account application prior to version 14.1.0.0 allows remote attac

Improper authorization in Smart suggestions prior to SMR Apr-2023 Release 1 in Android 13 and 4.1.01.0 in Android 12 all

Improper input validation vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to acc

Intent redirection vulnerability in SecSettings prior to SMR Apr-2022 Release 1 allows attackers to access arbitrary fil

Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker

Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker

Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device

Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device

Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling

PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local att

Outline is a service that allows for collaborative documentation. In versions 0.72.0 through 0.83.0, Outline introduced

A weakness has been identified in ScriptAndTools Real Estate Management System 1.0. Impacted is an unknown function of t

A flaw has been found in Das Parking Management System 停车场管理系统 6.2.0. Affected is an unknown function of the file /Opera

A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the fil

A security vulnerability has been detected in code-projects Mobile Shop Management System 1.0. This affects an unknown f

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulne

A weakness has been identified in itsourcecode Sports Management System 1.0. The impacted element is an unknown function

In multiple locations, there is a possible method for a malicious app to prevent dialing emergency services under limite

In isInSignificantPlace of multiple files, there is a possible way to access sensitive information due to a missing perm

In contentDescForNotification of NotificationContentDescription.kt, there is a possible notification content leak throug

In generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible cross user media disclosure due to a confused

In showAvatarPicker of EditUserPhotoController.java, there is a possible cross user image leak due to a confused deputy.

A vulnerability was found in macrozheng mall up to 1.0.3. This vulnerability affects the function paySuccess of the file

A vulnerability has been found in macrozheng mall up to 1.0.3. This affects the function cancelOrder of the file /order/

Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows rem

Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows rem

Foxit PDF Reader PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows rem

Foxit PDF Reader JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows rem

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers

Dell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File A

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) 8.1 before 8.1.2.2 could allow an authenticated user to obtain sensitive

ModStartCMS v9.5.0 has an arbitrary file write vulnerability, which allows attackers to write malicious files and execut

FireShare FileShare 1.2.25 contains a time-based blind SQL injection vulnerability in the sort parameter of the endpoint

A cross-site scripting (XSS) vulnerability exists in the PDF preview functionality of uTools thru 7.1.1. When a user pre

Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiat

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 128

An issue was discovered in Samsung Magician 6.3 through 8.3 on Windows. An attacker can achieve Elevation of Privileges

Many Notes 0.10.1 is vulnerable to Cross Site Scripting (XSS), which allows malicious Markdown files to execute JavaScri

Asian Arts Talents Foundation (AATF) Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scriptin

SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerabili

Incorrect access control in Beakon Application before v5.4.3 allows authenticated attackers with low-level privileges to

An issue was discovered in rust-ffmpeg 0.3.0 (after comit 5ac0527) Null pointer dereference vulnerability in the dump()

An arbitrary file upload vulnerability in Beakon Application before v5.4.3 allows attackers to execute arbitrary code vi

Cross Site Scripting vulnerability in Infor Global HR GHR v.11.23.03.00.21 and before allows a remote attacker to execut

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the user

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the comm

Wavlink AC1200 with firmware versions M32A3_V1410_230602 and M32A3_V1410_240222 are vulnerable to a post-authentication

A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows