52314+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.
In gokey versions <0.2.0, a flaw in the seed decryption logic resulted in passwords incorrectly being derived solely from the initial vector and the AES-GCM …
Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to inject arbitrary JavaScript code, which …
The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.3.2. This …
In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their length exceeds …
The Zigaform plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.6.5. This is due to the plugin exposing …
The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.9.4. This is …
The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8. This is due …
The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. …
The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up …
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, …
The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such …
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional …
In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no …
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious …
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if …
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE …
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE …
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting …
Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required …
Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox.
Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy …
Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Out-of-bounds read in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Out-of-bounds write in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Out-of-bounds write in parsing IFD tag in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Out-of-bounds read vulnerability in bootloader prior to SMR Dec-2025 Release 1 allows physical attackers to access out-of-bounds memory.
Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory.
Free website and port scanning — find vulnerabilities before attackers do.