CVE-2025-66305 Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Denial of Service DoS vulnerability was identified in the "Languages" submenu of the Grav admin configuration panel /admin/config/system. Specifically, the Supported parameter fails to properly validate user input. If a malformed value ...

EUVD-2025-200072

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.19...

Security Bulletin: IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752.

Summary IBM Edge Data Collector uses next-15.3.1.tgz which is vulnerable to CVE-2025-55173, CVE-2025-57752. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-55173 DESCRIPTION: Next.js is a React framework for building full-stack...

CVE-2025-61618

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

EUVD-2025-199962

In modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-61608

CVE-2025-61608 affects Unisoc nr modem. It is caused by improper input validation that can crash the system and enable remote denial of service, with CVSS v3.1 base metrics: AV(Network), AC(Low), PR(None), UI(None), S(Unchanged), C(N/A), I(N/A), A(High) and a base score of 7.5. Public documents d...

CVE-2025-61608

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

EUVD-2025-199964

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-61618

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-61618

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-11132

In nr modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed...

CVE-2025-11132

CVE-2025-11132 affects the Unisoc nr modem. The issue is a flaw from improper input validation in the modem stack, which can cause a system crash and remote denial of service without requiring privileges. In the available connected documents, concrete exploit details for this CVE are not provided...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from improper nr modem input validation, which could result in a remote denial of service...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from improper input validation and could lead to a remote denial of service...

CVE-2025-63095

CVE-2025-63095 affects Tempus Ex hello-video-codec v0.1.0. The vulnerability is due to improper input validation in BitstreamWriter::write_bits(), enabling a Denial of Service via crafted input. Public advisories (e.g., PT-2025-48451) recommend updating to a newer, fixed version. Connected source...

PT-2025-48422

Name of the Vulnerable Software and Affected Versions nr modem affected versions not specified Description A flaw exists in nr modem where improper input validation can cause a system crash, potentially leading to a remote denial of service. No additional execution privileges are required for...

ASB-A-426207912

In multiple locations, there is a possible permanent denial of service due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-443053939

In multiple functions of arm-smmu-v3.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2025-48534

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tyche Softwares Arconix Shortcodes allows Stored XSS.This issue affects Arconix Shortcodes: from n/a through 2.1.19...

PT-2025-48421

Name of the Vulnerable Software and Affected Versions nr modem affected versions not specified Description A system crash can occur due to improper input validation in nr modem. This could result in a remote denial of service, and no additional execution privileges are required. Recommendations A...