Latest CVE Feed
-
5.5
MEDIUMCVE-2025-47369
Information disclosure when a weak hashed value is returned to userland code in response to a IOCTL call to obtain a session ID.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Information Disclosure
-
7.8
HIGHCVE-2025-47356
Memory Corruption when multiple threads concurrently access and modify shared resources.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Race Condition
-
7.8
HIGHCVE-2025-47348
Memory corruption while processing identity credential operations in the trusted application.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-47346
Memory corruption while processing a secure logging command in the trusted application.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
8.4
HIGHCVE-2025-47345
Cryptographic issue may occur while encrypting license data.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Cryptography
-
6.7
MEDIUMCVE-2025-47344
Memory corruption while handling sensor utility operations.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-47343
Memory corruption while processing a video session to set video parameters.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
7.8
HIGHCVE-2025-47339
Memory corruption while deinitializing a HDCP session.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.7
MEDIUMCVE-2025-47337
Memory corruption while accessing a synchronization object during concurrent operations.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.7
MEDIUMCVE-2025-47336
Memory corruption while performing sensor register read operations.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.7
MEDIUMCVE-2025-47335
Memory corruption while parsing clock configuration data for a specific hardware type.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.7
MEDIUMCVE-2025-47334
Memory corruption while processing shared command buffer packet between camera userspace and kernel.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.6
MEDIUMCVE-2025-47333
Memory corruption while handling buffer mapping operations in the cryptographic driver.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.7
MEDIUMCVE-2025-47332
Memory corruption while processing a config call from userspace.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Memory Corruption
-
6.1
MEDIUMCVE-2025-47331
Information disclosure while processing a firmware event.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2025-47330
Transient DOS while parsing video packets received from the video firmware.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Denial of Service
-
7.1
HIGHCVE-2025-32300
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital zoom studio DZS Video Gallery allows Reflected XSS.This issue affects DZS Video Gallery: from n/a through 12.25.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Cross-Site Scripting
-
2.2
LOWCVE-2025-31964
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the loc... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Misconfiguration
-
2.9
LOWCVE-2025-31963
Improper authentication and missing CSRF protection in the local setup interface component in HCL BigFix IVR version 4.2 allows a local attacker to perform unauthorized configuration changes via unauthenticated administrative configuration requests.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Authentication
-
2.0
LOWCVE-2025-31962
Insufficient session expiration in the Web UI authentication component in HCL BigFix IVR version 4.2 allows an authenticated attacker to gain prolonged unauthorized access to protected API endpoints due to excessive expiration periods.... Read more
Affected Products :- Published: Jan. 07, 2026
- Modified: Jan. 07, 2026
- Vuln Type: Authentication