PT-2025-36090

Name of the Vulnerable Software and Affected Versions: AccessibilitySettingsUtils.java affected versions not specified Description: A logic error in the getComponentName function within AccessibilitySettingsUtils.java may allow a malicious Talkback service to be enabled instead of the system...

PT-2025-36089

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code within setupAccessibilityServices of AccessibilityFragment.java may allow an attacker to hide an enabled accessibility service. This could lead to local escalation...

The vulnerability of the SLD component of the SAP Business One resource management system allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SLD component in the SAP Business One resource management system is related to deficiencies in the authorization process. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability of the EcoStruxure IT Data Center Expert monitoring software lies in its insufficient entropy during the key generation process. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EcoStruxure IT Data Center Expert monitoring software relates to insufficient entropy during the key generation process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informatio...

The vulnerability in the isolated iframe environment of Mozilla Firefox allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the isolated environment of Mozilla Firefox’s iframe technology is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information from a remote...

The vulnerability of microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 model lies in the unsafe initialization of resources. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 model is related to unsafe initialization of resources. Exploiting this vulnerability could allow an attacker operating remotel...

The vulnerability of the btrfs_repair_one_sector() function in the fs/btrfs/extent_io.c module of the Btrfs file system support module in Linux allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btrfsrepaironesector function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux kernel relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the `snd_pcm_lib_preallocate_proc_write()` function in the `sound/core/pcm_memory.c` module, which is part of Linux’s kernel-based audio card support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sndpcmlibpreallocateprocwrite function in the sound/core/pcmmemory.c module, which is part of Linux’s audio card support, relates to the reallocation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the ext4_get_first_dir_block() function in the fs/ext4/namei.c module of the Ext4 file system support module for Linux’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4getfirstdirblock function in the fs/ext4/namei.c module of the Ext4 file system support in Linux’s operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the function ieee80211_vif_use_reserved_context() in the module net/mac80211/chan.c of the Linux kernel’s mac80211 stack allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the function ieee80211vifusereservedcontext in the net/mac80211/chan.c module of the mac80211 stack in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Linux operating system’s kernel, related to a memory reclamation error, allows attackers to compromise privacy, integrity, and accessibility.

The vulnerability of the Linux operating system’s kernel is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to compromise privacy, integrity, and accessibility of data...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the uvc_status_init() function in the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the uvcstatusinit function in the Linux operating system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-57886

Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through...

WordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) Vulnerability

Insecure Direct Object References IDOR Vulnerability discovered by n0arafatn0 in WordPress Plugin Accessibility Checker by Equalize Digital versions = 1.30.0...

CVE-2025-57886

Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through...

CVE-2025-57886 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Accessibility Checker by Equalize Digital: from n/a through 1.30.0...

CVE-2025-57886 WordPress Accessibility Checker by Equalize Digital Plugin <= 1.30.0 - Insecure Direct Object References (IDOR) Vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Digital accessibility-checker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Checker by Equalize Digital: from n/a through...