CVE-2025-47327

Memory corruption while encoding the image data...

CVE-2025-47327

CVE-2025-47327 describes a memory-corruption issue during image data encoding affecting Qualcomm chipsets. The vulnerability’s root cause is memory corruption in the image encoding path, with the NVD/CVE records noting a high-severity risk (CVSS v3.1: Local attack, low complexity, no user interac...

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

CVE-2025-47327 Use After Free in Camera

Memory corruption while encoding the image data...

UBUNTU-CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

CVE-2025-23274

The CVE-2025-23274 entry concerns NVIDIA nvJPEG in the CUDA Toolkit. The vulnerability is an out-of-bounds read in the jpeg encoding path triggered by a specially crafted input image, where dimensions cause integer overflows in array index calculations. This may lead to a denial of service. Root ...

CVE-2025-23274

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

CVE-2025-55887

Cross-Site Scripting XSS vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that ...

Qualcomm Chipsets Resource Management Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets that stems from a memory corruption during image data encoding...

PT-2025-39253

Name of the Vulnerable Software and Affected Versions NVIDIA nvJPEG affected versions not specified Description The software contains a flaw in JPEG encoding that could allow an attacker to trigger an out-of-bounds read by supplying a specially designed image. The image dimensions are crafted to...

CVE-2025-23274: Out-of-bounds Read

NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...

PT-2025-39283

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when encoding image data. The issue involves potential corruption during the image encoding process. Recommendations At the moment, there is no information about a...

Improper Handling of Unicode Encoding

Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Improper Handling of Unicode Encoding in the CKEditor file upload endpoint. An attacker can probing internal network endpoints by...

Cross-site Scripting (XSS)

Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the insufficient neutralization and encoding of special HTML characters during URL/path handling...

CVE-2025-59821

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

CVE-2025-0209

A reflected cross-site scripting XSS vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of...

CVE-2025-0209

A reflected cross-site scripting XSS vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of...

CVE-2025-59821 DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

Summary http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to: - Bypass front-end servers security controls - Launch targeted attacks against active users - Poison web caches Pre-requisites for the exploitatio...

CVE-2025-0209 Reflected Cross-Site Scripting (XSS) in WSO2 Identity Server Account Registration Flow

A reflected cross-site scripting XSS vulnerability exists in the account registration flow of WSO2 Identity Server due to improper output encoding. A malicious actor can exploit this vulnerability by injecting a crafted payload that is reflected in the server response, enabling the execution of...