PatchTheCVECVEs published by KoreLogic
CVEs published by KoreLogic (CVE Numbering Authority). 17 tracked.
- CVE-2025-15464 HIGH 7.5 DOWNGRADE Exported Activity allows external applications to gain application context and directly launch Gmail with inbo
- CVE-2025-5100 HIGH 8.0 UPGRADE A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve
- CVE-2025-5099 CRITICAL 9.8 UPGRADE An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achiev
- CVE-2025-5098 CRITICAL 9.1 UPGRADE PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to acces
- CVE-2025-54769 HIGH 8.8 UPGRADE An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file
- CVE-2025-54768 MEDIUM 5.3 UPGRADE An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lo
- CVE-2025-54767 MEDIUM 6.5 UPGRADE An authenticated, read-only user can kill any processes running on the Xormon Original virtual appliance as th
- CVE-2025-54766 MEDIUM 5.3 UPGRADE An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lo
- CVE-2025-54765 MEDIUM 5.3 UPGRADE An API endpoint that should be limited to web application administrators is hidden from, but accessible by, lo
- CVE-2024-8504 HIGH 8.8 An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "r
- CVE-2024-8503 CRITICAL 9.8 An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial to enumerate dat
- CVE-2024-6893 HIGH 7.5 DOWNGRADE The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain references to external entities
- CVE-2024-6892 MEDIUM 6.1 DOWNGRADE Attackers can craft a malicious link that once clicked will execute arbitrary JavaScript in the context of the
- CVE-2024-6891 HIGH 8.8 DOWNGRADE Attackers with a valid username and password can exploit a python code injection vulnerability during the natu
- CVE-2024-6890 HIGH 8.8 DOWNGRADE Password reset tokens are generated using an insecure source of randomness
- CVE-2024-6707 HIGH 8.8 DOWNGRADE Attacker controlled files can be uploaded to arbitrary locations on the web server's filesystem by abusing a p
- CVE-2024-6706 MEDIUM 6.1 DOWNGRADE Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in