CVE-2025-20910

CVE-2025-20910 affects Galaxy Watch Gallery versions prior to SMR Mar-2025 Release 1, where an incorrect default permission allows local attackers to access data in Galaxy Watch Gallery. The CVSS v3.1 vector (Local, Low attack complexity, No privileges, No user interaction) yields a base score of...

CVE-2025-21089

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read...

CVE-2019-20208

dimCRead in isomedia/boxcode3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow...

CVE-2025-27655

creationtimestamp| type| source ---|---|--- 2025-03-06 00:00:21+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljo6sbajj52b 2025-03-06 02:16:26+00:00| seen| Telegram/1Np4XDUTqbMrImIcHm8RIgunvF0kDg4Xu2I85ZHdh8fyW9e 2025-03-06 12:00:15+00:00| seen|...

CVE-2024-57972

The pairing API request handler in Microsoft HoloLens 1 Windows Holographic through 10.0.17763.3046 and HoloLens 2 Windows Holographic through 10.0.22621.1244 allows remote attackers to cause a Denial of Service resource consumption and device unusability by sending many requests through the Devi...

CVE-2025-27508

creationtimestamp| type| source ---|---|--- 2025-03-05 23:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlazil2q 2025-03-06 01:18:19+00:00| seen| https://t.me/cvedetector/19663...

CVE-2024-51144

Cross Site Request Forgery CSRF vulnerability exists in the 'pvmsg.php?action=addmessage', pvmsg.php?action=confirmdelete , and ajax.server.php?page=user&action=flipfollow endpoints in Ampache = 6.6.0...

CVE-2024-31525

Peppermint Ticket Management 0.4.6 is vulnerable to Incorrect Access Control. A regular registered user is able to elevate his privileges to admin and gain complete access to the system as the authorization mechanism is not validated on the server side and only on the client side. This can result...

CVE-2025-20206

Cisco Secure Client for Windows is affected by an IPC channel vulnerability that could allow a local attacker with valid credentials to perform a DLL hijack and execute arbitrary code with SYSTEM privileges when the Secure Firewall Posture Engine (formerly HostScan) is installed. Root cause is in...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Security Vulnerabilities fixed in Firefox ESR 128.8 MFSA 2025-16 bsc1237683 - CVE-2024-43097: Overflow when growing an SkRegion's RunArray - CVE-2025-1930: AudioIPC StreamData could trigger a use-after-free in the Browser process -...

CVE-2024-13471

creationtimestamp| type| source ---|---|--- 2025-03-05 11:37:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6539 2025-03-05 14:26:12+00:00| seen| https://t.me/cvedetector/19626 2025-03-05 16:00:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxykpxh2q 2025-03-06...

CVE-2025-1702

creationtimestamp| type| source ---|---|--- 2025-03-05 11:37:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6537 2025-03-05 13:00:21+00:00| published-proof-of-concept| Telegram/DsqY2xCUAceOk6gVX-WbKwN-bFih9TINF-Jy-5d0JrLUuxc 2025-03-05 14:26:13+00:00| seen|...

CVE-2024-43056

Transient DOS during hypervisor virtual I/O operation in a virtual machine...

CVE-2025-1393 Weidmueller: Authentication Vulnerability due to Hard-coded Credentials

An unauthenticated remote attacker can use hard-coded credentials to gain full administration privileges on the affected product...

CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1919

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-1918

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. Chromium security severity: Medium...

CVE-2025-27678

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Client Remote Code Execution V-2023-001...

CVE-2025-27672

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6499 2025-03-05 08:34:50+00:00| seen| https://t.me/cvedetector/19597 2025-03-05 09:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuveikl22 2025-03-06...

CVE-2025-27681

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6490 2025-03-05 08:34:36+00:00| seen| https://t.me/cvedetector/19587 2025-03-06 12:00:28+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzt3i6j2g 2025-04-15...