CVE Vulnerability Catalog

A use-after-free vulnerability in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Information disclosure when Video engine escape input data is less than expected minimum size.

Information disclosure while running video usecase having rogue firmware.

Information disclosure while invoking calibration data from user space to update firmware size.

Information disclosure while decoding RTP packet headers received by UE from the network when the padding bit is set.

Information disclosure while decoding RTP packet received by UE from the network, when payload length mentioned is greater than the available buffer length.

Podatność CVE-2025-21484 dotyczy ujawnienia informacji, gdy jednostka końcowa (UE) otrzymuje pakiet RTP z sieci, podczas dekodowania i reassemblacji fragmentów z pakietu RTP.

Cryptographic issue while performing RSA PKCS padding decoding.

In Puppet Enterprise versions 2025.4.0 and 2025.5, the encryption key used for encrypting content in the Infra Assistant database was not excluded from the files gathered by Puppet backup. The key is only present on the system if the user has a Puppet Enterprise Advanced license and has enabled the Infra Assistant feature. The key is used for encrypting one particular bit of data in the Infra Assistant database: the API key for their AI provider account. This has been fixed in Puppet Enterprise version 2025.6, and release notes for 2025.6 have remediation steps for users of affected versions who can't update to the latest version.

When extracting a tar archive, pip may not check that symbolic links point into the extraction directory if the tarfile module does not implement PEP 706. This vulnerability only affects Python versions that do not implement PEP 706, and upgrading pip alone does not fix all tarfile-related issues. It is recommended to use a Python version with PEP 706 or a patched pip.

Horilla is a free and open source Human Resource Management System (HRMS). An authenticated Remote Code Execution (RCE) vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python's eval() function on a user-controlled query parameter in the project_bulk_archive view. This allows privileged users (e.g., administrators) to execute arbitrary system commands on the server. This issue has been patched in version 1.3.1.

NVIDIA CUDA Toolkit for all platforms contains a vulnerability in cuobjdump where an attacker may cause a stack-based buffer overflow by getting the user to run cuobjdump on a malicious ELF file. A successful exploit of this vulnerability may lead to arbitrary code execution at the privilege level of the user running cuobjdump.

NVIDIA nvJPEG library contains a vulnerability where an attacker can cause an out-of-bounds read by means of a specially crafted JPEG file. A successful exploit might lead to information disclosure or denial of service.

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) via several parameters in all versions up to, and including, 7.6.9 due to insufficient input sanitization and output escaping. An authenticated attacker with Contributor-level access or higher can inject arbitrary scripts into pages that execute whenever a user visits the injected page. The vulnerability was partially patched in version 7.6.9.

W aplikacji Endurance od Magnetism Studios do wersji 3.3.0 na macOS znaleziono lukę. Dotyczy ona funkcji loadModuleNamed:WithReply w pliku /Applications/Endurance.app/Contents/Library/LaunchServices/com.MagnetismStudios.endurance.helper, co może prowadzić do braku autoryzacji.

Wtyczka MultiLoca - WooCommerce Multi Locations Inventory Management dla WordPressa jest podatna na nieautoryzowaną modyfikację danych, co może prowadzić do eskalacji uprawnień. Problem wynika z braku sprawdzenia uprawnień w funkcji 'wcmlim_settings_ajax_handler' we wszystkich wersjach do 4.2.8 włącznie.

In the Linux kernel, the ath12k_service_ready_ext_event() function in the ath12k Wi-Fi driver has a memory leak. On failure, svc_rdy_ext.mac_phy_caps is not freed, causing a memory leak detected by kmemleak.

In the Linux kernel, the Bluetooth L2CAP subsystem lacked a check for the encryption key size on incoming connections. This allowed connections with a key smaller than the required 16 bytes in Security Mode 4 Level 4, violating the specification and potentially leading to weaker encryption.

W podatności CVE-2025-9031 występuje problem z różnicą czasową w DivvyDrive Web, który umożliwia przeprowadzanie wyszukiwań międzydomenowych. Dotyczy to wersji od 4.8.2.2 do przed 4.8.2.15.