CVE Database

150016+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS
CVE-2025-21421
7.8 HIGH

Memory corruption while processing escape code in API.

Apr 7, 2025
CVE-2024-49848
6.7 MEDIUM

Memory corruption while processing multiple IOCTL calls from HLOS to DSP.

Apr 7, 2025
CVE-2024-45557
7.8 HIGH

Memory corruption can occur when TME processes addresses from TZ and MPSS requests without proper validation.

Apr 7, 2025
CVE-2024-45556
6.5 MEDIUM

Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR.

Apr 7, 2025
CVE-2024-45552
8.2 HIGH

Information disclosure may occur during a video call if a device resets due to a non-conforming RTCP packet that doesn`t adhere to RFC standards.

Apr 7, 2025
CVE-2024-45551
6.2 MEDIUM

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

Apr 7, 2025
CVE-2024-45549
7.7 HIGH

Information disclosure while creating MQ channels.

Apr 7, 2025
CVE-2024-45544
6.6 MEDIUM

Memory corruption while processing IOCTL calls to add route entry in the HW.

Apr 7, 2025
CVE-2024-45543
6.6 MEDIUM

Memory corruption while accessing MSM channel map and mixer functions.

Apr 7, 2025
CVE-2024-45540
6.6 MEDIUM

Memory corruption while invoking IOCTL map buffer request from userspace.

Apr 7, 2025
CVE-2024-43067
7.8 HIGH

Memory corruption occurs during the copying of read data from the EEPROM because the IO configuration is exposed as shared memory.

Apr 7, 2025
CVE-2024-43066
7.8 HIGH

Memory corruption while handling file descriptor during listener registration/de-registration.

Apr 7, 2025
CVE-2024-43065
7.1 HIGH

Cryptographic issues while generating an asymmetric key pair for RKP use cases.

Apr 7, 2025
CVE-2024-43058
7.8 HIGH

Memory corruption while processing IOCTL calls.

Apr 7, 2025
CVE-2024-43046
5.5 MEDIUM

There may be information disclosure during memory re-allocation in TZ Secure OS.

Apr 7, 2025
CVE-2024-33058
7.5 HIGH

Memory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.

Apr 7, 2025
CVE-2025-3347
6.3 MEDIUM

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_pending.php. The …

Apr 7, 2025
CVE-2025-3346
8.8 HIGH

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file …

Apr 7, 2025
CVE-2025-3345
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality …

Apr 7, 2025
CVE-2025-3344
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the file …

Apr 7, 2025
CVE-2025-30473
8.8 HIGH

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in …

Apr 7, 2025
CVE-2024-11859

DLL Search Order Hijacking vulnerability potentially allowed an attacker with administrator privileges to load a malicious dynamic-link library and execute its code.

Apr 7, 2025
CVE-2025-3343
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. …

Apr 7, 2025
CVE-2025-3342
7.3 HIGH

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. …

Apr 7, 2025
CVE-2025-3341
7.3 HIGH

A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. …

Apr 7, 2025
CVE-2025-3340
7.3 HIGH

A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality …

Apr 7, 2025
CVE-2025-3339
7.3 HIGH

A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file …

Apr 7, 2025
CVE-2025-3338
7.3 HIGH

A vulnerability classified as critical has been found in codeprojects Online Restaurant Management System 1.0. Affected is an unknown function of the file /admin/user_save.php. The …

Apr 7, 2025
CVE-2024-11071
8.8 HIGH

Permissive Cross-domain Policy with Untrusted Domains vulnerability in local API server of DestinyECM solution(versions described below) which is developed and maintained by Cyberdigm may allow …

Apr 7, 2025
CVE-2025-3337
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the …

Apr 7, 2025
CVE-2025-3336
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file …

Apr 7, 2025
CVE-2025-3335
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. This affects an unknown part of the file …

Apr 7, 2025
CVE-2025-3334
7.3 HIGH

A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the …

Apr 7, 2025
CVE-2025-31175
8.4 HIGH

Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity.

Apr 7, 2025
CVE-2025-31174
6.8 MEDIUM

Path traversal vulnerability in the DFS module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Apr 7, 2025
CVE-2025-31173
8.8 HIGH

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Apr 7, 2025
CVE-2025-31172
7.8 HIGH

Memory write permission bypass vulnerability in the kernel futex module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Apr 7, 2025
CVE-2025-31171
6.8 MEDIUM

File read permission bypass vulnerability in the kernel file system module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Apr 7, 2025
CVE-2025-31170
8.4 HIGH

Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality.

Apr 7, 2025
CVE-2025-20664
7.5 HIGH

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no …

Apr 7, 2025
CVE-2025-20663
7.5 HIGH

In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote (proximal/adjacent) information disclosure with no …

Apr 7, 2025
CVE-2025-20662
6.7 MEDIUM

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege …

Apr 7, 2025
CVE-2025-20661
6.7 MEDIUM

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege …

Apr 7, 2025
CVE-2025-20660
6.7 MEDIUM

In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege …

Apr 7, 2025
CVE-2025-20659
6.5 MEDIUM

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …

Apr 7, 2025
CVE-2025-20658
6.0 MEDIUM

In DA, there is a possible permission bypass due to a logic error. This could lead to local escalation of privilege, if an attacker has …

Apr 7, 2025
CVE-2025-20657
6.7 MEDIUM

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor …

Apr 7, 2025
CVE-2025-20656
6.8 MEDIUM

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if …

Apr 7, 2025
CVE-2025-20655
5.3 MEDIUM

In keymaster, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure if a …

Apr 7, 2025
CVE-2025-20654
9.8 CRITICAL

In wlan service, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with …

Apr 7, 2025

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.