CVE-2025-8419

creationtimestamp| type| source ---|---|--- 2025-08-06 20:55:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvr4blmsez2s...

CVE-2025-7771

creationtimestamp| type| source ---|---|--- 2025-08-06 16:29:10+00:00| seen| https://poliverso.org/objects/0477a01e-b9b15122-a4c6f440754a3234 2025-08-07 13:24:32+00:00| seen| https://bsky.app/profile/technadu.com/post/3lvstk5lvjs2m 2025-08-07 21:02:23+00:00| seen|...

CVE-2025-7202 Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights

A Cross-Site Request Forgery CSRF in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights...

CVE-2025-54571

A flaw was found in modsecurity. The engine may allow attackers to manipulate the HTTP response’s Content-Type header, enabling them to influence downstream processes or applications. This manipulation can be achieved remotely without authentication. Consequently, an attacker can alter the expect...

CVE-2025-27073

Transient DOS while creating NDP instance...

CVE-2025-27069

Memory corruption while processing DDI command calls...

CVE-2025-21012

Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection configuration...

CVE-2025-21022

Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information...

CVE-2025-54650

Improper array index verification vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect the audio decoding function...

CVE-2025-54649

Vulnerability of using incompatible types to access resources in the location service. Impact: Successful exploitation of this vulnerability may cause some location information attributes to be incorrect...

CVE-2025-54648

CVE-2025-54648 describes an out-of-bounds read in the SSAP module of the Huawei HarmonyOS NearLink protocol stack. The vulnerability affects the NearLink SSAP component and, if exploited, may impact availability. The primary sources (NVD, Red Hat, CNVD and related feeds) consistently state availa...

CVE-2025-54645

Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54637

CVE-2025-54637 is an out-of-bounds array access vulnerability in the kernel ambient light module, caused by insufficient data validation. The issue affects Huawei’s HarmonyOS and EMUI kernel components, with a confidentiality impact as per reported metrics. The available sources do not specify ex...

CVE-2025-54635

Vulnerability of returning released pointers in the distributed notification service. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54634

Vulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-54619

Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability...

CVE-2025-54619

CVE-2025-54619 affects Huawei HarmonyOS in the multi-mode input module. The connected PT-2025-32026 document notes an iterator failure issue in the module, with exploitation potentially impacting availability. The exact affected versions are not specified in the provided materials, and the connec...

CVE-2025-8655 Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability

Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

CVE-2023-43039

creationtimestamp| type| source ---|---|--- 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81...

CVE-2025-45766

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is...