Export limit exceeded: 374440 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (374440 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-42926 1 Sap 2 Netweaver Application Server Java, Sap Netweaver Application Server Java 2025-10-23 5.3 Medium
SAP NetWeaver Application Server Java does not perform an authentication check when an attacker attempts to access internal files within the web application.Upon successfully exploitation, an unauthenticated attacker could access these files to gather additional sensitive information about the system.This vulnerability has a low impact on confidentiality and does not affect the integrity or availability of the server.
CVE-2025-21047 1 Samsung 1 Android 2025-10-23 5.2 Medium
Improper access control in KnoxGuard prior to SMR Oct-2025 Release 1 allows physical attackers to use the privileged APIs.
CVE-2025-21050 1 Samsung 2 Android, Mobile Devices 2025-10-23 7.1 High
Improper input validiation in Contacts prior to SMR Oct-2025 Release 1 allows local attackers to access data across multiple user profiles.
CVE-2025-21049 1 Samsung 2 Android, Mobile Devices 2025-10-23 5.5 Medium
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.
CVE-2025-21051 1 Samsung 1 Android 2025-10-23 4 Medium
Out-of-bounds write in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2025-21052 1 Samsung 1 Android 2025-10-23 4 Medium
Out-of-bounds write under specific condition in the pre-processing of JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21053 1 Samsung 1 Android 2025-10-23 4 Medium
Out-of-bounds write in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to cause memory corruption.
CVE-2025-21054 1 Samsung 1 Android 2025-10-23 4 Medium
Out-of-bounds read in the parsing header for JPEG decoding in libpadm.so prior to SMR Oct-2025 Release 1 allows local attackers to potentially access out-of-bounds memory.
CVE-2025-21055 1 Samsung 2 Android, Mobile Devices 2025-10-23 4.3 Medium
Out-of-bounds read and write in libimagecodec.quram.so prior to SMR Oct-2025 Release 1 allows remote attackers to access out-of-bounds memory.
CVE-2025-60361 1 Radare 1 Radare2 2025-10-23 3.3 Low
radare2 v5.9.8 and before contains a memory leak in the function bochs_open.
CVE-2025-60360 1 Radare 1 Radare2 2025-10-23 5.5 Medium
radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.
CVE-2025-60359 1 Radare 1 Radare2 2025-10-23 5.5 Medium
radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.
CVE-2025-57164 1 Flowiseai 1 Flowise 2025-10-23 6.5 Medium
Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field.
CVE-2025-55100 1 Eclipse 2 Threadx Usbx, Usbx 2025-10-23 9.1 Critical
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio10_sam_parse_func() when parsing a list of sampling frequencies.
CVE-2025-55098 1 Eclipse 2 Threadx Usbx, Usbx 2025-10-23 6.1 Medium
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_device_type_get() when parsing a descriptor of an USB audio device.
CVE-2025-55099 1 Eclipse 2 Threadx Usbx, Usbx 2025-10-23 6.1 Medium
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_alternate_setting_locate() when parsing a descriptor with attacker-controlled frequency fields.
CVE-2025-55097 1 Eclipse 2 Threadx Usbx, Usbx 2025-10-23 6.1 Medium
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_audio_streaming_sampling_get() when parsing a descriptor of an USB streaming device.
CVE-2025-55096 1 Eclipse 2 Threadx Netx Duo, Threadx Usbx 2025-10-23 6.1 Medium
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in _ux_host_class_hid_report_descriptor_get()  when parsing a descriptor of an USB HID device.
CVE-2025-60358 1 Radare 1 Radare2 2025-10-23 5.5 Medium
radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.
CVE-2025-62412 1 Librenms 1 Librenms 2025-10-23 3.8 Low
LibreNMS is a community-based GPL-licensed network monitoring system. The alert rule name in the Alerts > Alert Rules page is not properly sanitized, and can be used to inject HTML code. This vulnerability is fixed in 25.10.0.