6.7
CVE-2025-47336 - Use After Free in Camera Driver
Memory corruption while performing sensor register read operations.
6.7
CVE-2025-47335 - Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while parsing clock configuration data for a specific hardware type.
6.7
CVE-2025-47334 - Buffer Copy Without Checking Size of Input in Camera Driver
Memory corruption while processing shared command buffer packet between camera userspace and kernel.
6.6
CVE-2025-47333 - Use After Free in HLOS
Memory corruption while handling buffer mapping operations in the cryptographic driver.
6.7
CVE-2025-47332 - Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing a config call from userspace.
6.1
CVE-2025-47331 - Buffer Over-read in Video
Information disclosure while processing a firmware event.
5.5
CVE-2025-47330 - Buffer Over-read in Video
Transient DOS while parsing video packets received from the video firmware.
4.8
CVE-2026-0642 - projectworlds House Rental and Property Listing complaint.php cross site scripting
A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /app/complaint.php. The manipulation of the argument Name results in cross site scripting. The attack may be launched remotely. The exploit is now public and mโฆ
3.7
CVE-2025-11235 - MOVEit Transfer REST API does not require current password in order to initiate the password changeโฆ
Unverified Password Change vulnerability in Progress MOVEit Transfer on Windows (REST API modules).This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.3, from 2023.0.0 before 2023.0.8, from 2022.1.0 before 2022.1.11, from 2022.0.0 before 2022.0.10.
8.6
CVE-2025-15472 - TRENDnet TEW-811DRU httpdย uapply.cgi setDeviceURLย os command injection
A flaw has been found in TRENDnet TEW-811DRU 1.0.2.0. This affects the function setDeviceURLย of the file uapply.cgi of the component httpdย . This manipulation of the argument DeviceURL causes os command injection. The attack can be initiated remotely. The exploit has been published and may be usedโฆ