CVE-2025-27213

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to enable Android Debug Bridge ADB and make unsupported changes to the system. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier UniFi Connect Display Versio...

CVE-2025-27213

The CVE-2025-27213 entry concerns several UniFi Connect devices with an improper access control in the API that could allow a malicious actor already authenticated to enable Android Debug Bridge (ADB) and perform unsupported system changes. Affected products and versions are: UniFi Connect EV Sta...

CVE-2025-27215

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system. Affected Products: UniFi Connect Display Cast Version 1.10.3 and earlier UniFi Connect Display Cast Pro Version 1.0.89 and...

CVE-2025-27215

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast devices to make unsupported changes to the system. Affected Products: UniFi Connect Display Cast Version 1.10.3 and earlier UniFi Connect Display Cast Pro Version 1.0.89 and...

PT-2025-34174 · Ubiquiti · Unifi Connect Display Cast

Name of the Vulnerable Software and Affected Versions: UniFi Connect Display Cast versions prior to 1.10.7 UniFi Connect Display Cast Pro versions prior to 1.0.94 UniFi Connect Display Cast Lite versions prior to 1.1.8 Description: An improper access control issue could allow a malicious actor...

PT-2025-34172 · Ubiquiti · Unifi Connect Display +2

Name of the Vulnerable Software and Affected Versions: UniFi Connect EV Station Pro versions 1.5.18 and earlier UniFi Connect Display versions 1.9.324 and earlier UniFi Connect Display Cast versions 1.9.301 and earlier UniFi Connect Display Cast Pro versions 1.0.78 and earlier UniFi Connect Displ...

Ubiquiti多款产品 安全漏洞

Ubiquiti UniFi Connect EV Station and others are products of Ubiquiti, Inc.Ubiquiti UniFi Connect EV Station is an electric vehicle station.Ubiquiti UniFi Connect Display is an access control system monitor device. Ubiquiti UniFi Connect Display Cast is a player. A security vulnerability exists i...

Ubiquiti多款产品 安全漏洞

Ubiquiti UniFi Connect Display Cast and others are a player from Ubiquiti USA. A security vulnerability exists in various Ubiquiti products that stems from improper access control and could lead to system modifications. The following products and versions are affected: UniFi Connect Display Cast...

Fedora 41 : chromium (2025-81d05a9171)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-81d05a9171 advisory. Updated to 139.0.7258.66 CVE-2025-8576: Use after free in Extensions CVE-2025-8578: Use after free in Cast CVE-2025-8579: Inappropriate implementati...

Linux Distros Unpatched Vulnerability : CVE-2025-37858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/jfs: Prevent integer overflow in AG size calculation The JFS filesystem calculates allocation group AG size using 1 2TB aggregates on 32-bit systems, this...

Linux Distros Unpatched Vulnerability : CVE-2022-49749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: designware: use casting of u64 in clock multiplication to avoid overflow In functions i2cdwscllcnt and i2cdwsclhcnt may have overflow by depending on the...

DEBIAN-CVE-2025-8578

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8578

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8578

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the Cast component of the Google Chrome browser, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Cast component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

SUSE CVE-2025-8578

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

PT-2025-44145

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the f2fs filesystem within the Linux kernel that could lead to an overflow during a left shift operation. The issue is addressed by casting the type of folio-index from...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 414760982 Medium CVE-2025-8576: Use after free in Extensions. Reported by asnine on 2025-04-30 384050903 Medium CVE-2025-8577: Inappropriate implementation in Picture In Picture. Reported by Umar Farooq on 2024-12-14 423387026 Mediu...

CVE-2025-7891

A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...

CVE-2025-7891

A vulnerability was found in InstantBits Web Video Cast App up to 5.12.4 on Android. It has been rated as problematic. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.instantbits.cast.webvideo. The manipulation leads to improper export of...