CVEs published August 6, 2025
217 CVEs were published on August 6, 2025: 7 critical, 67 high.
- Published
- 217
- Critical
- 7
- High
- 67
- Medium
- 136
- Low
- 7
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 19
Most affected products
- Huawei HarmonyOS
- 37
- Kenwood DMX958XR
- 29
- Qualcomm Snapdragon
- 24
- NVIDIA Triton Inference Server
- 17
- Huawei HarmonyOS · Huawei EMUI
- 12
- Samsung Mobile Devices
- 8
- Emby MediaBrowser
- 6
- Samsung Mobile Blockchain Keystore
- 4
- Autodesk 3ds Max
- 3
- Tigo Energy Cloud Connect Advanced
- 3
Critical 7
- CVE-2025-7768Use of Hard-coded Credentials in Tigo Energy Cloud Connect AdvancedTigo Energy Cloud Connect Advanced
- CVE-2025-23317NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse shell by sending a speciNVIDIA Triton Inference Server
- CVE-2025-23311NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requesNVIDIA Triton Inference Server
- CVE-2025-23310NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack buffer overflow by specialNVIDIA Triton Inference Server
- CVE-2025-22470CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1 allow crafted dangerous files to be uploaded.SATO CL4/6NX Plus · SATO CL4/6NX-J Plus
- CVE-2025-6994Reveal Listing <= 3.3 - Unauthenticated Privilege EscalationSmartDataSoft Reveal Listing
- CVE-2025-30127An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.
High 67
- CVE-2025-54788SuiteCRM: Authenticated Blind SQL Injection in InboundEmail moduleSuiteCRM
- CVE-2025-54785SuiteCRM is Vulnerable to PHP Object Injection in ReportsSuiteCRM
- CVE-2025-7770Predictable Seed in Pseudo-Random Number Generator (PRNG) in Tigo Energy Cloud Connect AdvancedTigo Energy Cloud Connect Advanced
- CVE-2025-6634TGA File Parsing Memory Corruption VulnerabilityAutodesk 3ds Max
- CVE-2025-6633RBG File Parsing Out-of-Bounds Write VulnerabilityAutodesk 3ds Max
- CVE-2025-7769Improper Neutralization of Special Elements used in a Command ('Command Injection') in Tigo Energy Cloud Connect AdvancedTigo Energy Cloud Connect Advanced
- CVE-2025-47908Denial of service via malicious preflight requests in github.com/rs/corsgithub.com/rs/cors
- CVE-2025-38747Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability.Dell SupportAssist OS Recovery
- CVE-2025-53786Microsoft Exchange Server Hybrid Deployment Elevation of Privilege VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1
- CVE-2025-3354IBM Tivoli Monitoring code executionIBM Tivoli Monitoring
- CVE-2025-3320IBM Tivoli Monitoring code executionIBM Tivoli Monitoring
- CVE-2025-23331NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive siNVIDIA Triton Inference Server
- CVE-2025-23327NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specNVIDIA Triton Inference Server
- CVE-2025-23326NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a spNVIDIA Triton Inference Server
- CVE-2025-23325NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause uncontrolled recursion through aNVIDIA Triton Inference Server
- CVE-2025-23324NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leNVIDIA Triton Inference Server
- CVE-2025-23323NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause an integer overflow or wraparound, leNVIDIA Triton Inference Server
- CVE-2025-23322NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where multiple requests could cause a double free when a streaNVIDIA Triton Inference Server
- CVE-2025-23321NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a divide by zero issue by issuing an NVIDIA Triton Inference Server
- CVE-2025-23320NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause the shareNVIDIA Triton Inference Server
- CVE-2025-23319NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofNVIDIA Triton Inference Server
- CVE-2025-23318NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofNVIDIA Triton Inference Server
- CVE-2025-46390CWE-204: Observable Response DiscrepancyEmby MediaBrowser
- CVE-2025-46387CWE-639 Authorization Bypass Through User-Controlled KeyEmby MediaBrowser
- CVE-2025-46386CWE-639 Authorization Bypass Through User-Controlled KeyEmby MediaBrowser
- CVE-2025-22469OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1.SATO CL4/6NX Plus · SATO CL4/6NX-J Plus
- CVE-2025-7771Code Execution / Escalation of Privileges in ThrottleStopTechPowerUp ThrottleStop
- CVE-2025-47324Exposure of Sensitive Information Through Metadata in Powerline Communication FirmwareQualcomm Snapdragon
- CVE-2025-27076Time-of-check Time-of-use (TOCTOU) Race Condition in DisplayQualcomm Snapdragon
- CVE-2025-27075Improper Validation of Array Index in Bluetooth HOSTQualcomm Snapdragon
- CVE-2025-27073Reachable Assertion in WLAN FirmwareQualcomm Snapdragon
- CVE-2025-27071Buffer Copy Without Checking Size of Input in Powerline Communication FirmwareQualcomm Snapdragon
- CVE-2025-27069Untrusted Pointer Dereference in DSP ServiceQualcomm Snapdragon
- CVE-2025-27068Buffer Over-read in CameraQualcomm Snapdragon
- CVE-2025-27067Improper Validation of Array Index in DSP ServiceQualcomm Snapdragon
- CVE-2025-27066Reachable Assertion in WLAN FirmwareQualcomm Snapdragon
- CVE-2025-27065Buffer Over-read in WLAN FirmwareQualcomm Snapdragon
- CVE-2025-27062Improper Access Control in Automotive MultimediaQualcomm Snapdragon
- CVE-2025-21477Improper Input Validation in ModemQualcomm Snapdragon
- CVE-2025-21474Use After Free in BTHOSTQualcomm Snapdragon
- CVE-2025-21473Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_LinuxQualcomm Snapdragon
- CVE-2025-21461Out-of-bounds Write in Camera_LinuxQualcomm Snapdragon
- CVE-2025-21458Use After Free in NPUQualcomm Snapdragon
- CVE-2025-21456Use After Free in NPUQualcomm Snapdragon
- CVE-2025-21455Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_LinuxQualcomm Snapdragon
- CVE-2025-21452Reachable Assertion in ModemQualcomm Snapdragon
- CVE-2025-8420Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Executionemarket-design Campus Directory – Faculty, Staff & Stude… +6
- CVE-2025-54634Vulnerability of improper processing of abnormal conditions in huge page separation.Huawei HarmonyOS
- CVE-2025-54627Out-of-bounds write vulnerability in the skia module.Huawei HarmonyOS
- CVE-2025-7036CleverReach WP <= 1.5.20 - Unauthenticated SQL Injection via title Parametercleverreach43 CleverReach® WP
- CVE-2025-54622Binding authentication bypass vulnerability in the devicemanager module.Huawei HarmonyOS
- CVE-2025-8654Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-8653Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-54611EXTRA_REFERRER resource read vulnerability in the Gallery module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54607Authentication management vulnerability in the ArkWeb module.Huawei HarmonyOS
- CVE-2025-54606Status verification vulnerability in the lock screen module.Huawei HarmonyOS
- CVE-2025-54655Race condition vulnerability in the virtualization base module.Huawei HarmonyOS
- CVE-2025-54653Path traversal vulnerability in the virtualization file module.Huawei HarmonyOS
- CVE-2025-54652Path traversal vulnerability in the virtualization base module.Huawei HarmonyOS
- CVE-2025-45766poco v1.14.1-release was discovered to contain weak encryption.
- CVE-2025-46659An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6.
- CVE-2025-50286A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/to
- CVE-2025-51040Electrolink FM/DAB/TV Transmitter Web Management System Unauthorized access vulnerability via the /FrameSetCore.html endpoint in Electrolink
- CVE-2025-51055Insecure Data Storage of credentials has been found in /api_vedo/configuration/config.yml file in Vedo Suite version 2024.17.
- CVE-2025-51056An unrestricted file upload vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to write to arbitrary filesyst
- CVE-2025-51532Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a cra
- CVE-2025-51624Cross-site scripting (XSS) vulnerability in Zone Bitaqati thru 3.4.0.
Medium, low and unrated 143
- CVE-2025-54786SuiteCRM: Legacy iCal service allows unauthenticated access to meeting dataSuiteCRM-Core
- CVE-2025-6632PSD File Parsing Out-of-Bounds Read VulnerabilityAutodesk 3ds Max
- CVE-2025-38746Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerabiDell SupportAssist OS Recovery
- CVE-2025-8667SkyworkAI DeepResearchAgent tools.py from_mcp os command injectionSkyworkAI DeepResearchAgent
- CVE-2025-8419Org.keycloak/keycloak-services: keycloak smtp inject vulnerabilitykeycloak · Red Hat build of Keycloak +1
- CVE-2025-8665agno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injectionagno-agi agno
- CVE-2025-20215Cisco Webex Meeting Client Join Certificate Validation VulnerabilityCisco Webex Meetings
- CVE-2025-20332Cisco Identity Services Engine Authorization Bypass VulnerabilityCisco Identity Services Engine Software
- CVE-2025-20331Cisco Identity Services Engine Stored Cross-Site Scripting VulnerabiliyCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2024-8244Walk/WalkDir in path/filepath susceptible to symlink raceGo standard library path/filepath
- CVE-2025-48394An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limitedEaton G4 PDU
- CVE-2025-48393The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacEaton G4 PDU
- CVE-2024-52885Path Traversalcheckpoint Check Point Mobile Access
- CVE-2025-2028Lack of TLS validationcheckpoint Check Point Management Log Server
- CVE-2025-36020IBM Guardium Data Protection information disclosureIBM Guardium Data Protection
- CVE-2025-8616Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced AuthenticationOpenText Advanced Authentication
- CVE-2025-23335NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an undeNVIDIA Triton Inference Server
- CVE-2025-23334NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofNVIDIA Triton Inference Server
- CVE-2025-23333NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-ofNVIDIA Triton Inference Server
- CVE-2025-5197Regular Expression Denial of Service (ReDoS) in huggingface/transformershuggingface/transformers · transformers
- CVE-2025-46391CWE-284: Improper Access ControlEmby MediaBrowser
- CVE-2025-46389CWE-620: Unverified Password ChangeEmby MediaBrowser
- CVE-2025-46388CWE-200 Exposure of Sensitive Information to an Unauthorized ActorEmby MediaBrowser
- CVE-2025-6013Vault LDAP MFA Enforcement Bypass When Using Username As AliasHashiCorp Vault · github.com/hashicorp/vault
- CVE-2025-8620GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposurestellarwp GiveWP – Donation Plugin and Fundraising Platform
- CVE-2025-8556Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect resultscircl · Builds for Red Hat OpenShift +22
- CVE-2025-7202Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key LightsElgato Key Light · Elgato Ring Light +1
- CVE-2025-27072Buffer Copy Without Checking Size of Input in Automotive Vehicle NetworksQualcomm Snapdragon
- CVE-2025-21472Leftover Debug Code in Secure ElementQualcomm Snapdragon
- CVE-2025-21465Out-of-bounds Read in CoreQualcomm Snapdragon
- CVE-2025-21464Out-of-bounds Read in CoreQualcomm Snapdragon
- CVE-2025-21457Buffer Over-read in Automotive OS Platform AndroidQualcomm Snapdragon
- CVE-2025-7954Race Condition in Shopware Voucher SubmissionShopware · shopware/platform
- CVE-2025-7727Gutenverse <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Text and Fun Fact Blocksjegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons…
- CVE-2025-7376Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISMitsubishi Electric GENESIS64 · Mitsubishi Electric Ico… +13
- CVE-2025-21024Use of Implicit Intent for Sensitive Communication in Smart View prior to Android 16 allows local attackers to access sensitive information.Samsung Mobile Smart View
- CVE-2025-21023Improper access control in WcsExtension for Galaxy Watch prior to Android Watch 16 allows local attackers to access sensitive information.Samsung Mobile WcsExtension for Galaxy Watch
- CVE-2025-21022Improper access control in Galaxy Wearable prior to version 2.2.63.25042861 allows local attackers to access sensitive information.Samsung Mobile Galaxy Wearable
- CVE-2025-21021Out-of-bounds write in drawing pinpad in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-of-bouSamsung Mobile Blockchain Keystore
- CVE-2025-21020Out-of-bounds write in creating bitmap images in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write ouSamsung Mobile Blockchain Keystore
- CVE-2025-21019Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung Health.Samsung Mobile Samsung Health
- CVE-2025-21018Out-of-bounds read in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to read out-of-bounds memory.Samsung Mobile Blockchain Keystore
- CVE-2025-21017Out-of-bounds write in detaching crypto box in Blockchain Keystore prior to version 1.3.17.2 allows local privileged attackers to write out-Samsung Mobile Blockchain Keystore
- CVE-2025-21016Improper access control in PkgPredictorService prior to SMR Aug-2025 Release 1 in Chinese Android 13, 14, 15 and 16 allows local attackers tSamsung Mobile Devices
- CVE-2025-21015Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege.Samsung Mobile Devices
- CVE-2025-21014Improper export of android application component in Emergency SoS prior to SMR Aug-2025 Release 1 allows local attackers to access sensitiveSamsung Mobile Devices
- CVE-2025-21013Improper access control in SemSensorManager for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive infoSamsung Mobile Devices
- CVE-2025-21012Improper access control in fall detection for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to modify fall detection cSamsung Mobile Devices
- CVE-2025-21011Improper access control in SemSensorService for Galaxy Watch prior to SMR Aug-2025 Release 1 allows local attackers to access sensitive infoSamsung Mobile Devices
- CVE-2025-21010Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung accoSamsung Mobile Devices
- CVE-2025-20990Improper access control in accessing system device node prior to SMR Aug-2025 Release 1 allows local attackers to access device identifier.Samsung Mobile Devices
- CVE-2025-7399Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingMuffinGroup Betheme
- CVE-2025-7498Exclusive Addons for Elementor <= 2.7.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdowntimstrifler Exclusive Addons for Elementor
- CVE-2025-8100Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Contentbdthemes Element Pack – Widgets, Templates & Addons for Ele…
- CVE-2025-54651Race condition vulnerability in the kernel hufs module.Huawei HarmonyOS
- CVE-2025-54650Improper array index verification vulnerability in the audio codec module.Huawei HarmonyOS
- CVE-2025-54649Vulnerability of using incompatible types to access resources in the location service.Huawei HarmonyOS
- CVE-2025-54648Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Huawei HarmonyOS
- CVE-2025-54647Out-of-bounds read vulnerability in the SSAP module of the NearLink protocol stack.Huawei HarmonyOS
- CVE-2025-54646Vulnerability of inadequate packet length check in the BLE module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54645Out-of-bounds array access issue due to insufficient data verification in the location service module.Huawei HarmonyOS
- CVE-2025-54644Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54643Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54642Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54641Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54640ParcelMismatch vulnerability in attribute deserialization.Huawei HarmonyOS
- CVE-2025-54639ParcelMismatch vulnerability in attribute deserialization.Huawei HarmonyOS
- CVE-2025-54638Issue of inconsistent read/write serialization in the ad module.Huawei HarmonyOS
- CVE-2025-54637Out-of-bounds array access issue due to insufficient data verification in the kernel ambient light module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54636Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54635Vulnerability of returning released pointers in the distributed notification service.Huawei HarmonyOS
- CVE-2025-8595Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Importthemegrill Zakra
- CVE-2025-54633Out-of-bounds read vulnerability in the register configuration of the DMA module.Huawei HarmonyOS
- CVE-2025-54632Vulnerability of insufficient data length verification in the HVB module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54631Vulnerability of insufficient data length verification in the partition module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54630:Vulnerability of insufficient data length verification in the DFA module.Huawei HarmonyOS
- CVE-2025-54629Race condition issue occurring in the physical page import process of the memory management module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54628Vulnerability of incomplete verification information in the communication module.Huawei HarmonyOS · Huawei EMUI
- CVE-2025-54625Race condition vulnerability in the kernel file system module.Huawei HarmonyOS
- CVE-2025-54626Pointer dangling vulnerability in the cjwindow module.Huawei HarmonyOS
- CVE-2025-54624Unexpected injection event vulnerability in the multimodalinput module.Huawei HarmonyOS
- CVE-2025-7502WPBakery Page Builder for WordPress <= 8.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingWPBakery Page Builder
- CVE-2025-6986FileBird – WordPress Media Library Folders & File Manager <= 6.4.8 - Authenticated (Author+) SQL Injectionninjateam FileBird – WordPress Media Library Folders & File…
- CVE-2025-6256Flex Guten <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameterdragwp Flex Guten – Multile Blocks
- CVE-2025-6690WP Tournament Registration <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via field Parameterarchaeopath WP Tournament Registration
- CVE-2025-6259esri-map-view <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via esri-map-view Shortcodegeoplay9 esri-map-view
- CVE-2025-54623Out-of-bounds read vulnerability in the devicemanager module.Huawei HarmonyOS
- CVE-2025-54621Iterator failure issue in the WantAgent module.Huawei HarmonyOS
- CVE-2025-54620Deserialization vulnerability of untrusted data in the ability module.Huawei HarmonyOS
- CVE-2025-54619Iterator failure issue in the multi-mode input module.Huawei HarmonyOS
- CVE-2025-54618Permission control vulnerability in the distributed clipboard module.Huawei HarmonyOS
- CVE-2025-54617Stack-based buffer overflow vulnerability in the dms_fwk module.Huawei HarmonyOS
- CVE-2025-54616Out-of-bounds array access vulnerability in the ArkUI framework.Huawei HarmonyOS
- CVE-2025-54615Vulnerability of insufficient information protection in the media library module.Huawei HarmonyOS
- CVE-2025-54614Input verification vulnerability in the home screen module.Huawei HarmonyOS
- CVE-2025-54613Iterator failure vulnerability in the card management module.Huawei HarmonyOS
- CVE-2025-54612Iterator failure vulnerability in the card management module.Huawei HarmonyOS
- CVE-2025-8656Kenwood DMX958XR Protection Mechanism Failure Software Downgrade VulnerabilityKenwood DMX958XR
- CVE-2025-8655Kenwood DMX958XR libSystemLib Command injection Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-8652Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-8651Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-8650Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-8649Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution VulnerabilityKenwood DMX958XR
- CVE-2025-8648Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8647Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8646Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8645Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8644Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8643Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8642Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8641Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8640Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8639Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8638Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8637Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8636Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8635Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8634Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8633Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8632Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8631Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8630Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8629Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-8628Kenwood DMX958XR Firmware Update Command Injection VulnerabilityKenwood DMX958XR
- CVE-2025-54610Out-of-bounds access vulnerability in the audio codec module.Huawei HarmonyOS
- CVE-2025-54609Out-of-bounds access vulnerability in the audio codec module.Huawei HarmonyOS
- CVE-2025-54608Vulnerability that allows setting screen rotation direction without permission verification in the screen management module.Huawei HarmonyOS
- CVE-2024-553984C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
- CVE-2024-553994C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
- CVE-2024-554024C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
- CVE-2025-45764jsrsasign v11.1.0 was discovered to contain weak encryption.jsrsasign project jsrsasign
- CVE-2025-46660An issue was discovered in 4C Strategies Exonaut 21.6.
- CVE-2025-50233A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of t
- CVE-2025-50234MCCMS v2.7.0 has an SSRF vulnerability located in the index() method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is
- CVE-2025-50740AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability.
- CVE-2025-51052A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem files by exploiting
- CVE-2025-51053A Cross-site scripting (XSS) vulnerability in /api_vedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascrip
- CVE-2025-51054Vedo Suite 2024.17 is vulnerable to Incorrect Access Control, which allows remote attackers to obtain a valid high privilege JWT token witho
- CVE-2025-51057A local file inclusion (LFI) vulnerability in Vedo Suite version 2024.17 allows remote authenticated attackers to read arbitrary filesystem
- CVE-2025-51058Bottinelli Informatical Vedo Suite 2024.17 is vulnerable to Server-side Request Forgery (SSRF) in the /api_vedo/video/preview endpoint, whic
- CVE-2025-51306In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without ex
- CVE-2025-51308In Gatling Enterprise versions below 1.25.0, a low-privileged user that does not hold the role "admin" could perform a REST API call on read
- CVE-2025-51531A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in