Explore CVE records

MedPublished 06 Aug 2025, 16:52 WIB

CVE-2025-22469

OS command injection vulnerability exists in CL4/6NX Plus and CL4/6NX-J Plus (Japan model) with the firmware versions prior to 1.15.5-r1. An arbitrary OS command may be executed on the system with a certain non-administrative user privilege.

Excerpt language: en.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:54 WIB

Official record

HighPublished 06 Aug 2025, 16:35 WIB

CVE-2025-7771

Code Execution / Escalation of Privileges in ThrottleStop

ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke arbitrary kernel functions wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

MedPublished 06 Aug 2025, 16:22 WIB

CVE-2025-8620

GiveWP – Donation Plugin and Fundraising Platform <= 4.6.0 - Unauthenticated Donor Data Exposure

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to extract donor names, emails, and donor id. CVE-2025-47444 is a duplicate of this issue. CVE-2025-47444 is …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 23:59 WIB

Official record

LowPublished 06 Aug 2025, 15:48 WIB

CVE-2025-8556

Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Excerpt language: en.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 12:42 WIB

Official record

MedPublished 06 Aug 2025, 15:28 WIB

CVE-2025-7202

Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights

A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.

Excerpt language: en.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated07 Aug 2025, 03:23 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-47324

Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Information disclosure while accessing and modifying the PIB file of a remote device via powerline.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:28 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27076

Time-of-check Time-of-use (TOCTOU) Race Condition in Display

Memory corruption while processing simultaneous requests via escape path.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:28 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27075

Improper Validation of Array Index in Bluetooth HOST

Memory corruption while processing IOCTL command with larger buffer in Bluetooth Host.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:33 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27073

Reachable Assertion in WLAN Firmware

Transient DOS while creating NDP instance.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:33 WIB

Official record

MedPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27072

Buffer Copy Without Checking Size of Input in Automotive Vehicle Networks

Information disclosure while processing a packet at EAVB BE side with invalid header length.

Excerpt language: en.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:34 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27071

Buffer Copy Without Checking Size of Input in Powerline Communication Firmware

Memory corruption while processing specific files in Powerline Communication Firmware.

Excerpt language: en.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:35 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27069

Untrusted Pointer Dereference in DSP Service

Memory corruption while processing DDI command calls.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:35 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27068

Buffer Over-read in Camera

Memory corruption while processing an IOCTL command with an arbitrary address.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:35 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27067

Improper Validation of Array Index in DSP Service

Memory corruption while processing DDI call with invalid buffer.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:36 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27066

Reachable Assertion in WLAN Firmware

Transient DOS while processing an ANQP message.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:36 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27065

Buffer Over-read in WLAN Firmware

Transient DOS while processing a frame with malformed shared-key descriptor.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:37 WIB

Official record

HighPublished 06 Aug 2025, 14:26 WIB

CVE-2025-27062

Improper Access Control in Automotive Multimedia

Memory corruption while handling client exceptions, allowing unauthorized channel access.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:37 WIB

Official record

HighPublished 06 Aug 2025, 14:25 WIB

CVE-2025-21477

Improper Input Validation in Modem

Transient DOS while processing CCCH data when NW sends data with invalid length.

Excerpt language: en.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:37 WIB

Official record

HighPublished 06 Aug 2025, 14:25 WIB

CVE-2025-21474

Use After Free in BTHOST

Memory corruption while processing commands from A2dp sink command queue.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:37 WIB

Official record

HighPublished 06 Aug 2025, 14:25 WIB

CVE-2025-21473

Time-of-check Time-of-use (TOCTOU) Race Condition in Camera_Linux

Memory corruption when using Virtual cdm (Camera Data Mover) to write registers.

Excerpt language: en.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:49 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage