Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In hidd_check_config_done of hidd_conn.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.08%Aug 26, 2025
- High8.4In bnepu_check_send_packet of bnep_utils.cc, there is a possible way to achieve code execution due to a use after free.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.4In multiple locations, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.4In avct_lcb_msg_ind of avct_lcb_act.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.10%Aug 26, 2025
- Critical9.8In sdp_snd_service_search_req of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.39%Aug 26, 2025
- High7.5In handleBondStateChanged of AdapterService.java, there is a possible unapproved data access due to a missing permission check.Check if you run itEPSS 0.31%Aug 26, 2025
- Medium6.5In handleBondStateChanged of AdapterService.java, there is a possible permission bypass due to misleading or insufficient UI.Check if you run itEPSS 0.15%Aug 26, 2025
- Medium6.2In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check.Check if you run itEPSS 0.13%Aug 26, 2025
- High8.8In multiple locations, there is a possible out of bounds write due to a use after free.Check if you run itEPSS 0.22%Aug 26, 2025
- Medium4.0In multiple locations, there is a possible way to access content across user profiles due to URI double encoding.Check if you run itEPSS 0.10%Aug 26, 2025
- Medium5.5In multiple functions of StatusHint.java and TelecomServiceImpl.java, there is a possible way to reveal images across users due to a confused deputy.Check if you run itEPSS 0.10%Aug 26, 2025
- High7.5In dng_lossless_decoder::HuffDecode of dng_lossless_jpeg.cpp, there is a possible way to cause a crash due to uninitialized data.Check if you run itEPSS 0.37%Aug 26, 2025
- High7.8In multiple locations, there is a possible way to overlay the installation confirmation dialog due to a tapjacking/overlay attack.Check if you run itEPSS 0.09%Aug 26, 2025
- High7.8In multiple locations, there is a possible way that avdtp and avctp channels could be unencrypted due to a logic error in the code.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.8In main of main.cpp, there is a possible way to bypass SELinux due to a logic error in the code.Check if you run itEPSS 0.30%Aug 26, 2025
- Critical9.8In process_service_search_attr_req of sdp_server.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.41%Aug 26, 2025
- Critical9.8In process_service_attr_rsp of sdp_discovery.cc, there is a possible way to execute arbitrary code due to a use after free.Check if you run itEPSS 0.41%Aug 26, 2025
- Medium5.5In multiple locations, there is a possible crash loop due to resource exhaustion.Check if you run itEPSS 0.10%Aug 26, 2025
- High8.0In btif_hh_hsdata_rpt_copy_cb of bta_hh.cc, there is a possible way to corrupt memory due to a use after free.Check if you run itEPSS 0.20%Aug 26, 2025
- High7.9Svelte devalue is a utility library.Check if you run itEPSS 0.37%Aug 26, 2025
- Medium6.4The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the broken preg_replace expression in all versions up to, and including, 1.2.7 duCheck if you run itEPSS 0.20%Aug 26, 2025
- Medium5.1Agiloft Release 28 contains an XML External Entities vulnerability in any table that allows 'import/export', allowing an authenticated attacker to import the template file and perfCheck if you run itEPSS 0.32%Aug 26, 2025
- Critical9.2Agiloft Release 28 downloads critical system packages over an insecure HTTP connection.Check if you run itEPSS 0.24%Aug 26, 2025
- High8.7Agiloft Release 28 contains several accounts with default credentials that could allow local privilege escalation.Check if you run itEPSS 0.35%Aug 26, 2025
- Medium4.8Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a spCheck if you run itEPSS 0.44%Aug 26, 2025
Sort