EUVD-2025-37809

Out-of-bounds write in libimagecodec.quram.so prior to SMR Nov-2025 Release 1 allows remote attackers to access out-of-bounds memory...

EUVD-2025-37806

Out-of-bounds write in handling opcode in fingerprint trustlet prior to SMR Nov-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

EUVD-2025-37802

The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.3 via the /mcp/v1/ REST API endpoint that exposes the 'Bearer Token' value when 'No-Auth URL' is enabled. This makes it possible for unauthenticated attackers to extract th...

EUVD-2025-37811

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability and validation check on the PMSAJAXCheckoutHandler::processpayment function in all versions up t...

EUVD-2025-37821

EUVD-2025-37821...

EUVD-2025-37824

EUVD-2025-37824...

EUVD-2025-37825

EUVD-2025-37825...

EUVD-2025-37823

EUVD-2025-37823...

EUVD-2025-37764

MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing eve...

EUVD-2025-37839

EUVD-2025-37839...

EUVD-2025-37822

EUVD-2025-37822...

EUVD-2025-37828

EUVD-2025-37828...

EUVD-2025-37838

EUVD-2025-37838...

EUVD-2025-37837

EUVD-2025-37837...

EUVD-2025-37829

EUVD-2025-37829...

EUVD-2025-37830

EUVD-2025-37830...

EUVD-2025-37833

EUVD-2025-37833...

EUVD-2025-37561

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00432679; Issue ID: MSV-395...

EUVD-2025-37555

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: WCNCR00434422; Issue ID: MSV-395...

EUVD-2025-37554

In gnss service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10010443; Issue ID: MSV-3966...