CVE-2025-21029

Improper handling of insufficient permission in System UI prior to SMR Sep-2025 Release 1 allows local attackers to send arbitrary replies to messages from the cover display...

CVE-2025-55037

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

CVE-2023-21467

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message...

CVE-2025-55037

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

CVE-2025-55037

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

CVE-2025-55037

TkEasyGUI (Python) has an OS command injection vulnerability (CVE-2025-55037) affecting versions prior to v1.0.22. The issue arises from improper neutralization of special elements used in OS commands, enabling a remote unauthenticated attacker to execute arbitrary commands when messages are cons...

PT-2025-36327

Name of the Vulnerable Software and Affected Versions Keycloak affected versions not specified Description A flaw exists in Keycloak where the account console and other pages accept arbitrary text in the error description query parameter. This text is directly rendered in error pages without...

CVE-2025-9998: Improper Check for Unusual or Exceptional Conditions

The sequence of packets received by a Networking server are not correctly checked. An attacker could exploit this vulnerability to send specially crafted messages to force the application to stop...

Fixed in Apache Tomcat 11.0.11

Low: Console manipulation via escape sequences in log messages CVE-2025-55754 Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

Information Disclosure

omeroweb is vulnerable to information disclosure. The vulnerability is due to error messages displayed during the Forgot Password reset process disclosing user information, which allows an attacker to enumerate or gain insights about valid users...

PT-2025-35942

Name of the Vulnerable Software and Affected Versions: Tesla Model 3 versions 2023.Xx through 2023.43 Description: Securing externally available CAN wires can easily allow physical access to the CAN bus, potentially enabling the injection of specially formed CAN messages to control remote start...

PT-2025-36029

Name of the Vulnerable Software and Affected Versions: avrc opt.cc affected versions not specified Description: An out-of-bounds write due to a heap buffer overflow exists in the avrc vendor msg function of avrc opt.cc. This issue could lead to escalation of privilege on a paired device without...

Linux Distros Unpatched Vulnerability : CVE-2011-3707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JanRain PHP OpenID library aka php-openid 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the...

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox < 128 and Thunderbird < 128.

...

CVE-2023-21467

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message...

CVE-2023-21467

CVE-2023-21467 is a vulnerability in the Exynos baseband’s 3GPP specification implementation, prior to Samsung SMR Apr-2023 Release 1, causing incorrect handling of unencrypted messages. Public details show it affects Exynos baseband code and is rated high impact (CVSSv3.1: Critical on NVD with N...

CVE-2023-21467

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message...

CVE-2023-21467

Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted message...

PT-2025-35660

Name of the Vulnerable Software and Affected Versions: Exynos baseband versions prior to SMR Apr-2023 Release 1 Description: An error in the 3GPP specification implementation within the Exynos baseband allows for incorrect handling of unencrypted messages. Recommendations: Update to SMR Apr-2023...

PT-2025-35683

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Sep-2025 Release 1 Description: Improper handling of insufficient permission in System UI allows local attackers to send arbitrary replies to messages from the cover display. Recommendations: Update System UI t...