EUVD-2025-202389

Not used...

EUVD-2025-202382

Not used...

EUVD-2025-202384

Not used...

CGA-QCPR-8XM5-JRGW

Bulletin has no description...

CGA-PMQC-HHC8-76QR

Bulletin has no description...

CGA-7Q5R-FGH7-96FR

Bulletin has no description...

ECHO-F49D-2A75-50EB

Bulletin has no description...

CGA-2875-VR2C-9F8F

Bulletin has no description...

MINI-5FX7-M4MX-PGGJ

Bulletin has no description...

EUVD-2025-201351

Not used...

EUVD-2025-201344

Not used...

EUVD-2025-201348

Not used...

MINI-2JGW-38RM-XPRP

Bulletin has no description...

EUVD-2025-200990

The Aquarius HelperTool 1.0.003 privileged XPC service on macOS contains multiple flaws that allow local privilege escalation. The service accepts XPC connections from any local process without validating the client's identity, and its authorization logic incorrectly calls AuthorizationCopyRights...

EUVD-2025-200986

WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation. The attacker needs "Create and manage sites" with "Domains management" and "Subdomains management."...

EUVD-2025-200994

A potential security vulnerability has been identified in HP Image Assistant for versions prior to 5.3.3. The vulnerability could potentially allow a local attacker to escalate privileges via a race condition when installing packages...

EUVD-2025-200999

Interactive service agent in OpenVPN version 2.5.0 through 2.7rc2 on Windows allows a local authenticated user to connect to the service and trigger an error causing a local denial of service...

EUVD-2025-201005

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. The function used to decode the SOR transparent container lacks bounds checking...

EUVD-2025-201011

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

EUVD-2025-201009

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...