CVE-2024-53015 Use After Free in Computer Vision

Memory corruption while processing IOCTL command to handle buffers associated with a session...

CVE-2024-53010 Improper Access Control in Core

Memory corruption may occur while attaching VM when the HLOS retains access to VM...

CVE-2025-31712

CVE-2025-31712 affects the cplog service due to a missing bounds check that enables an out-of-bounds write. This leads to local denial of service with no additional execution privileges required. The public documents do not provide exploitation details, affected versions, or remediation/patch inf...

CVE-2025-49162

creationtimestamp| type| source ---|---|--- 2025-06-03 04:45:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqoiairdp725...

CVE-2025-4224

creationtimestamp| type| source ---|---|--- 2025-06-03 03:17:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqodbghvvrt2 2025-06-03 04:00:20+00:00| seen| Telegram/pmPlZO6dmgj5xmjP6giwJnKC2jqNwrbba1AptZIPXMaM 2025-06-03 04:32:29+00:00|...

CVE-2025-4224

The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-5473

creationtimestamp| type| source ---|---|--- 2025-06-03 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-321/...

CVE-2024-12718

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

CVE-2025-23100

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The absence of a NULL check leads to a Denial of Service...

CVE-2025-23100

An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The absence of a NULL check leads to a Denial of Service...

CVE-2025-43924

Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter in SettingController for /fp/admin/settings/loginpage and the rootserviceurl parameter in FriendsController for /fp/admin/settings/friends, entered by an admin, allow stored XSS...

CVE-2025-23103

A security vulnerability exists in the Samsung Mobile Processor Exynos 1480 and 2400 due to a lack of length check , which results in out-of-bounds writes . Technical details regarding specific software components or memory locations are not provided. While the impact is categorized as HIGH with ...

CVE-2025-5419

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-5068

Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-5419

Google Chrome, Microsoft Edge, and Opera are affected by a High severity out-of-bounds read and write vulnerability in the V8 engine. A remote attacker can exploit heap corruption by navigating to a specially crafted HTML page. This vulnerability is actively exploited in the wild and has been add...

CVE-2025-45387

creationtimestamp| type| source ---|---|--- 2025-06-02 20:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmz5vhmu2r...

CVE-2025-48996

HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls. An unauthenticated information disclosure vulnerability exists in the Penn State University deployment of the HAX content management system via the haxPsuUsage API endpoint, related to a flat...

CVE-2025-48387

creationtimestamp| type| source ---|---|--- 2025-06-02 20:00:25+00:00| published-proof-of-concept| Telegram/M9ruxIqfssiRmufIiVDPBVG9309mAKgr9KyLQBBOZAkMKU 2025-06-02 20:37:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnmxx4dtgv2...

CVE-2024-52035

A flaw was found in the catdoc OLE Document File Allocation Table Parser. This vulnerability allows heap-based memory corruption via a specially crafted malformed file. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

CVE-2025-48387

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore n...