CVE-2025-48567: Improper Limitation of a Pathname to a Restricted Directory

In multiple locations, there is a possible bypass of a file path filter designed to prevent access to sensitive directories due to incorrect unicode normalization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for...

CVE-2024-43766: Cleartext Transmission of Sensitive Information

In multiple functions of btmblesec.cc, there is a possible unencrypted communication due to Invalid error handling. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-26704: Improper Neutralization of Special Elements used in an SQL Command

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/viewcategory.php...

CVE-2026-26708: Improper Neutralization of Special Elements used in an SQL Command

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageuser.php...

CVE-2025-47383: Missing Cryptographic Step

Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE...

CVE-2025-59600: Buffer Over-read

Memory Corruption when adding user-supplied data without checking available buffer space...

CVE-2025-47384: Reachable Assertion

Transient DOS when MAC configures config id greater than supported maximum value...

CVE-2025-47381: Use After Free

Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-47386: Use After Free

Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...

CVE-2025-59603: Out-of-bounds Write

Memory Corruption when processing invalid user address with nonstandard buffer address...

CVE-2025-47379: Use After Free

Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources...

CVE-2025-47378: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...

CVE-2025-47377: Use After Free

Memory Corruption when accessing a buffer after it has been freed while processing IOCTL calls...

CVE-2025-47376: Use After Free

Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...

CVE-2025-47373: Out-of-bounds Write

Memory Corruption when accessing buffers with invalid length during TA invocation...

CVE-2025-47371: Reachable Assertion

Transient DOS when an LTE RLC packet with invalid TB is received by UE...

CVE-2026-26699: Improper Control of Generation of Code

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/adminchangepicture.php...

CVE-2026-26703: Improper Neutralization of Special Elements used in an SQL Command

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advancesearch.php...

CVE-2026-26702: Improper Neutralization of Special Elements used in an SQL Command

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitemreuse.php...

CVE-2025-30062: Improper Neutralization of Special Elements used in an SQL Command

In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection...