90901 matches found
CVE-2025-27074: Incorrect Calculation of Buffer Size
Memory corruption while processing a GP command response...
CVE-2025-27070: Out-of-bounds Write
Memory corruption while performing encryption and decryption commands...
CVE-2025-12108: Missing Authentication for Critical Function
The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately without a login prompt or credentials check...
CVE-2025-56230: Missing Validation of OpenSSL Certificate
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component...
CVE-2025-32786: Improper Neutralization of Special Elements used in an SQL Command
The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents. Versions 1.5.0 and below are vulnerable to SQL Injection. This issue is fixed in version 1.5.1...
CVE-2025-20746: Stack-based Buffer Overflow
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010441; Issue ID: MSV-3967...
CVE-2025-43495: Exposure of Sensitive Information to an Unauthorized Actor
The issue was addressed with improved checks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be able to monitor keystrokes without user permission...
CVE-2025-47368: Buffer Over-read
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing...
CVE-2025-20747: Stack-based Buffer Overflow
In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966...
CVE-2025-47352: Improper Validation of Array Index
Memory corruption while processing audio streaming operations...
CVE-2025-47370: Reachable Assertion
Transient DOS when a remote device sends an invalid connection request during BT connectable LE scan...
CVE-2025-47367: Out-of-bounds Write
Memory corruption while accessing a buffer during IOCTL processing...
CVE-2025-47360: Stack-based Buffer Overflow
Memory corruption while processing client message during device management...
CVE-2025-60925: Exposure of Sensitive Information to an Unauthorized Actor
codeshare v1.0.0 was discovered to contain an information leakage vulnerability...
CVE-2025-47361: Improper Validation of Array Index
Memory corruption when triggering a subsystem crash with an out-of-range identifier...
CVE-2025-11690: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference IDOR vulnerability exists in the vehicleId parameter, allowing unauthorized access to sensitive information of other users’ vehicles. Exploiting this issue enables an attacker to retrieve data such as GPS coordinates, encryption keys, initialization vectors,...
Photon OS 5.0: Netkit PHSA-2025-5.0-0666
An update of the netkit package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0666. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2025-47353: Exposed Dangerous Method or Function
Memory corruption while processing request sent from GVM...