Latest CVE Feed
-
6.5
MEDIUMCVE-2025-20693
In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
5.5
MEDIUMCVE-2025-20692
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Is... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
5.5
MEDIUMCVE-2025-20691
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Is... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
5.5
MEDIUMCVE-2025-20690
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418038; Is... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
5.5
MEDIUMCVE-2025-20689
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Is... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
5.5
MEDIUMCVE-2025-20688
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418047; Is... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
5.5
MEDIUMCVE-2025-20687
In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418045; Issue... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 14, 2025
-
8.8
HIGHCVE-2025-20686
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patc... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
8.8
HIGHCVE-2025-20685
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patc... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
9.8
CRITICALCVE-2025-20684
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416939; ... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
9.8
CRITICALCVE-2025-20683
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; ... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
9.8
CRITICALCVE-2025-20682
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; ... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
9.8
CRITICALCVE-2025-20681
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; ... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
9.8
CRITICALCVE-2025-20680
In Bluetooth driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418044... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 14, 2025
-
6.5
MEDIUMCVE-2025-7156
A vulnerability has been found in hitsz-ids airda 0.0.3 and classified as critical. This vulnerability affects the function execute of the file /v1/chat/completions. The manipulation of the argument question leads to sql injection. The attack can be initi... Read more
Affected Products :- Published: Jul. 08, 2025
- Modified: Jul. 08, 2025
-
8.7
HIGHCVE-2025-7146
The iPublish System developed by Jhenggao has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to read arbitrary system file.... Read more
Affected Products :- Published: Jul. 08, 2025
- Modified: Jul. 08, 2025
-
9.8
CRITICALCVE-2025-7155
A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql inject... Read more
Affected Products : online_notes_sharing_system- Published: Jul. 08, 2025
- Modified: Jul. 09, 2025
-
8.8
HIGHCVE-2025-7154
A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname... Read more
- Published: Jul. 08, 2025
- Modified: Jul. 16, 2025
-
6.9
MEDIUMCVE-2025-43001
SAPCAR allows an attacker logged in with high privileges to override the permissions of the current and parent directories of the user or process extracting the archive, leading to privilege escalation. On successful exploitation, an attacker could modify... Read more
Affected Products :- Published: Jul. 08, 2025
- Modified: Jul. 08, 2025
-
6.9
MEDIUMCVE-2025-42992
SAPCAR allows an attacker logged in with high privileges to create a malicious SAR archive in SAPCAR. This could enable the attacker to exploit critical files and directory permissions without breaking signature validation, resulting in potential privileg... Read more
Affected Products :- Published: Jul. 08, 2025
- Modified: Jul. 08, 2025