Skip to main content
CVE-2025-41344 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41343 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41342 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41341 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41340 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41339 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41338 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41337 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41336 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41335 Nov 04, 14:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41114 Nov 04, 13:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41113 Nov 04, 13:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41112 Nov 04, 13:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-41111 Nov 04, 13:15 HIGH This Month

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Authentication Bypass Canaldenuncia App Canaldenuncia
NVD
CVSS 4.0
8.7
EPSS
0.1%
CVE-2025-11690 Nov 04, 11:15 HIGH This Month

An Insecure Direct Object Reference (IDOR) vulnerability exists in the vehicleId parameter, allowing unauthorized access to sensitive information of other users’ vehicles. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass
NVD
CVSS 3.1
8.5
EPSS
0.0%
CVE-2025-20742 Nov 04, 07:15 HIGH This Month

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. Rated high severity (CVSS 8.0), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Heap Overflow Mediatek Openwrt +1
NVD
CVSS 3.1
8.0
EPSS
0.0%
CVE-2025-20737 Nov 04, 07:15 HIGH This Month

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Stack Overflow Mediatek Openwrt +1
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-20735 Nov 04, 07:15 HIGH This Month

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Heap Overflow Mediatek Openwrt +1
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-20733 Nov 04, 07:15 HIGH This Month

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Heap Overflow Mediatek Openwrt +1
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-20728 Nov 04, 07:15 HIGH This Month

In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Heap Overflow Mediatek Software Development Kit
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-20727 Nov 04, 07:15 HIGH This Month

In Modem, there is a possible out of bounds write due to a heap buffer overflow. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Lr12a +4
NVD
CVSS 3.1
8.1
EPSS
0.2%
CVE-2025-20726 Nov 04, 07:15 HIGH This Month

In Modem, there is a possible out of bounds write due to an incorrect bounds check. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Buffer Overflow Heap Overflow Mediatek Lr12a +4
NVD
CVSS 3.1
7.5
EPSS
0.2%
CVE-2025-20725 Nov 04, 07:15 HIGH This Month

In ims service, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

Privilege Escalation Buffer Overflow Memory Corruption Mediatek Lr12a +2
NVD
CVSS 3.1
7.5
EPSS
0.2%
CVE-2025-11890 Nov 04, 05:16 HIGH This Month

The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-11724 Nov 04, 05:15 HIGH This Month

The EM Beer Manager plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in all versions up to, and including, 3.2.3. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress RCE File Upload
NVD
CVSS 3.1
8.8
EPSS
0.4%
CVE-2025-47368 Nov 04, 04:15 HIGH This Month

Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Fastconnect 6900 Firmware Fastconnect 7800 Firmware Sc8380xp Firmware +5
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-47367 Nov 04, 04:15 HIGH This Month

Memory corruption while accessing a buffer during IOCTL processing. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm Fastconnect 6700 Firmware Fastconnect 6900 Firmware +29
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-47365 Nov 04, 04:15 HIGH This Month

Memory corruption while processing large input data from a remote source via a communication interface. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Integer Overflow Qualcomm Qam8255p Firmware Qam8295p Firmware +33
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-47361 Nov 04, 04:15 HIGH This Month

Memory corruption when triggering a subsystem crash with an out-of-range identifier. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Qam8255p Firmware Qam8295p Firmware Qam8620p Firmware +25
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-47360 Nov 04, 04:15 HIGH This Month

Memory corruption while processing client message during device management. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Stack Overflow Qualcomm Qam8255p Firmware Qam8295p Firmware +33
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-47357 Nov 04, 04:15 HIGH This Month

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions. Rated high severity (CVSS 8.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Information Disclosure Qualcomm Qam8255p Firmware Qam8620p Firmware +22
NVD
CVSS 3.1
8.0
EPSS
0.0%
CVE-2025-47353 Nov 04, 04:15 HIGH This Month

Memory corruption while processing request sent from GVM. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Qam8255p Firmware Qam8650p Firmware Qam8775p Firmware +15
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-47352 Nov 04, 04:15 HIGH This Month

Memory corruption while processing audio streaming operations. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Fastconnect 7800 Firmware Qcc2072 Firmware Wcd9378c Firmware +11
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-27074 Nov 04, 04:15 HIGH This Month

Memory corruption while processing a GP command response. Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Qualcomm Apq8064au Firmware Csr8811 Firmware Immersive Home 214 Platform Firmware +92
NVD
CVSS 3.1
8.8
EPSS
0.0%
CVE-2025-27070 Nov 04, 04:15 HIGH This Month

Memory corruption while performing encryption and decryption commands. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm Ar8035 Firmware Fastconnect 6200 Firmware +172
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-43505 Nov 04, 02:15 HIGH This Month

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Apple Xcode
NVD
CVSS 3.1
8.8
EPSS
0.1%
CVE-2025-43454 Nov 04, 02:15 HIGH This Month

This issue was addressed through improved state management. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple iOS Ipados Iphone Os
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-43450 Nov 04, 02:15 HIGH This Month

A logic issue was addressed with improved checks. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Apple iOS Ipados Iphone Os
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-43449 Nov 04, 02:15 HIGH This Month

The issue was addressed with improved handling of caches. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Apple iOS Ipados Iphone Os
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-43399 Nov 04, 02:15 HIGH This Month

This issue was addressed with improved redaction of sensitive information. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Apple iOS macOS
NVD
CVSS 3.1
7.5
EPSS
0.1%
CVE-2025-43387 Nov 04, 02:15 HIGH This Month

A permissions issue was addressed with additional restrictions. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Apple macOS
NVD
CVSS 3.1
7.8
EPSS
0.0%
Prev Page 2 of 2

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy