[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 423466
> CVE-2025-54624 [MEDIUM 5.7]
[PUBLISHED: 2025-08-06] [EPSS 0.18%]
Unexpected injection event vulnerability in the multimodalinput module. Impact: Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-8656 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.27%]
Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows physically present attackers to downgrade software on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8655 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.62%]
Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fla...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8654 [HIGH 8.8]
[PUBLISHED: 2025-08-06] [EPSS 0.66%]
Kenwood DMX958XR ReadMVGImage Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8653 [HIGH 8.8]
[PUBLISHED: 2025-08-06] [EPSS 0.38%]
Kenwood DMX958XR JKRadioService Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Kenwood DMX958XR. Authentication is not required to exploit this vulnerability. The specific f...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8652 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.62%]
Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8651 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.62%]
Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8650 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.62%]
Kenwood DMX958XR libSystemLib Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fla...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8649 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.62%]
Kenwood DMX958XR JKWifiService Command Injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific fl...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8648 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.84%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8647 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.84%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within th...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8646 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.84%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8645 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.84%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8644 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.84%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8643 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.84%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8642 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8641 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8640 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8639 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware update...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8638 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8637 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.88%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8636 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.88%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8635 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8634 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.87%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8633 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.88%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8632 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.88%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8631 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.91%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8630 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.91%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8629 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.91%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-8628 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.91%]
Kenwood DMX958XR Firmware Update Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
AFFECTED_PRODUCTS: Jvckenwood Dmx958xr Firmware
> CVE-2025-7502 [MEDIUM 6.4]
[PUBLISHED: 2025-08-06] [EPSS 0.25%]
The WPBakery Page Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several shortcodes in all versions up to, and including, 8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
> CVE-2025-7036 [HIGH 7.5]
[PUBLISHED: 2025-08-06] [EPSS 0.59%]
The CleverReach® WP plugin for WordPress is vulnerable to time-based SQL Injection via the ‘title’ parameter in all versions up to, and including, 1.5.20 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...
> CVE-2025-6986 [MEDIUM 6.5]
[PUBLISHED: 2025-08-06] [EPSS 0.45%]
The FileBird – WordPress Media Library Folders & File Manager plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 6.4.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...
> CVE-2025-6690 [MEDIUM 6.4]
[PUBLISHED: 2025-08-06] [EPSS 0.27%]
The WP Tournament Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘field’ parameter in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-leve...
> CVE-2025-6259 [MEDIUM 6.4]
[PUBLISHED: 2025-08-06] [EPSS 0.27%]
The esri-map-view plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's esri-map-view shortcode in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated at...
> CVE-2025-6256 [MEDIUM 6.4]
[PUBLISHED: 2025-08-06] [EPSS 0.37%]
The Flex Guten plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘thumbnailHoverEffect’ parameter in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...
> CVE-2025-54623 [MEDIUM 6.3]
[PUBLISHED: 2025-08-06] [EPSS 0.18%]
Out-of-bounds read vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54622 [HIGH 8.3]
[PUBLISHED: 2025-08-06] [EPSS 0.17%]
Binding authentication bypass vulnerability in the devicemanager module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54621 [MEDIUM 5.3]
[PUBLISHED: 2025-08-06] [EPSS 0.11%]
Iterator failure issue in the WantAgent module. Impact: Successful exploitation of this vulnerability may cause memory release failures.
> CVE-2025-54620 [MEDIUM 5.5]
[PUBLISHED: 2025-08-06] [EPSS 0.12%]
Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54619 [MEDIUM 5.3]
[PUBLISHED: 2025-08-06] [EPSS 0.11%]
Iterator failure issue in the multi-mode input module. Impact: Successful exploitation of this vulnerability may cause iterator failures and affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54618 [MEDIUM 5.7]
[PUBLISHED: 2025-08-06] [EPSS 0.15%]
Permission control vulnerability in the distributed clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54617 [MEDIUM 6.8]
[PUBLISHED: 2025-08-06] [EPSS 0.38%]
Stack-based buffer overflow vulnerability in the dms_fwk module. Impact: Successful exploitation of this vulnerability can cause RCE.
AFFECTED_PRODUCTS: Huawei Harmonyos
> CVE-2025-54616 [MEDIUM 4.0]
[PUBLISHED: 2025-08-06] [EPSS 0.11%]
Out-of-bounds array access vulnerability in the ArkUI framework. Impact: Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos
> CVE-2025-54615 [MEDIUM 6.2]
[PUBLISHED: 2025-08-06] [EPSS 0.12%]
Vulnerability of insufficient information protection in the media library module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54614 [MEDIUM 6.2]
[PUBLISHED: 2025-08-06] [EPSS 0.11%]
Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos
> CVE-2025-54613 [MEDIUM 5.9]
[PUBLISHED: 2025-08-06] [EPSS 0.11%]
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.
> CVE-2025-54612 [MEDIUM 5.9]
[PUBLISHED: 2025-08-06] [EPSS 0.11%]
Iterator failure vulnerability in the card management module. Impact: Successful exploitation of this vulnerability may affect function stability.
> CVE-2025-54611 [HIGH 7.3]
[PUBLISHED: 2025-08-06] [EPSS 0.12%]
EXTRA_REFERRER resource read vulnerability in the Gallery module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
AFFECTED_PRODUCTS: Huawei Emui, Huawei Emui, Huawei Emui ... (+9)
> CVE-2025-54610 [MEDIUM 5.4]
[PUBLISHED: 2025-08-06] [EPSS 0.21%]
Out-of-bounds access vulnerability in the audio codec module. Impact: Successful exploitation of this vulnerability may affect availability.
AFFECTED_PRODUCTS: Huawei Harmonyos, Huawei Harmonyos