Latest CVE Feed
-
9.8
CRITICALCVE-2025-54951
A group of related buffer overflow vulnerabilities in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit cea9b23aa8ff78aff928... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
9.8
CRITICALCVE-2025-54950
An out-of-bounds access vulnerability in the loading of ExecuTorch models can cause the runtime to crash and potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit b6b7a16df5e7852d976d8c34c8a7e9a1b... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
9.8
CRITICALCVE-2025-54949
A heap buffer overflow vulnerability in the loading of ExecuTorch models can potentially result in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit ede82493dae6d2d43f8c424e7be4721abe5242be... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
9.8
CRITICALCVE-2025-30405
An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 0... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
9.8
CRITICALCVE-2025-30404
An integer overflow vulnerability in the loading of ExecuTorch models can cause overlapping allocations, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit d158236b1dc84539c1b16843bc74054c9d... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
3.7
LOWCVE-2025-54787
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. There is a vulnerability in SuiteCRM version 7.14.6 which allows unauthenticated downloads of any file from the upload-directory, as long as it is na... Read more
Affected Products : suitecrm- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
6.5
MEDIUMCVE-2025-8701
A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /OL_OprationLog/GetPageList. The manipulation of the argument optU... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 08, 2025
-
4.8
MEDIUMCVE-2025-8698
A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amf_nsmf_pdusession_handle_release_sm_context of the file src/amf/nsmf-handler.c of the component AMF Service. The manipulation leads to reac... Read more
Affected Products : open5gs- Published: Aug. 07, 2025
- Modified: Aug. 07, 2025
-
9.1
CRITICALCVE-2025-53792
Azure Portal Elevation of Privilege Vulnerability... Read more
Affected Products : azure_portal- Published: Aug. 07, 2025
- Modified: Aug. 14, 2025
-
8.2
HIGH- Published: Aug. 07, 2025
- Modified: Aug. 14, 2025
-
7.5
HIGH- Published: Aug. 07, 2025
- Modified: Aug. 14, 2025
-
10.0
CRITICAL- Published: Aug. 07, 2025
- Modified: Aug. 14, 2025
-
9.1
CRITICALCVE-2025-45765
ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions ... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
7.0
HIGHCVE-2025-26513
The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges.... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 08, 2025
-
9.8
CRITICALCVE-2025-48709
An issue was discovered in BMC Control-M 9.0.21.300. When Control-M Server has a database connection, it runs DBUStatus.exe frequently, which then calls dbu_connection_details.vbs with the username, password, database hostname, and port written in clearte... Read more
Affected Products :- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
5.6
MEDIUMCVE-2025-47808
In GStreamer through 1.26.1, the subparse plugin's tmplayer_parse_line function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.... Read more
Affected Products : gstreamer- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
5.5
MEDIUMCVE-2025-47807
In GStreamer through 1.26.1, the subparse plugin's subrip_unescape_formatting function may dereference a NULL pointer while parsing a subtitle file, leading to a crash.... Read more
Affected Products : gstreamer- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
5.6
MEDIUMCVE-2025-47806
In GStreamer through 1.26.1, the subparse plugin's parse_subrip_time function may write data past the bounds of a stack buffer, leading to a crash.... Read more
Affected Products : gstreamer- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
8.1
HIGHCVE-2025-47219
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_trak function may read past the end of a heap buffer while parsing an MP4 file, possibly leading to information disclosure.... Read more
Affected Products : gstreamer- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025
-
6.6
MEDIUMCVE-2025-47183
In GStreamer through 1.26.1, the isomp4 plugin's qtdemux_parse_tree function may read past the end of a heap buffer while parsing an MP4 file, leading to information disclosure.... Read more
Affected Products : gstreamer- Published: Aug. 07, 2025
- Modified: Aug. 12, 2025