Security Vulnerabilities
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVSS Score
3.3
EPSS Score
0.0
Published
2025-10-11
Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
5.3
EPSS Score
0.0
Published
2025-10-11
Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
2.8
EPSS Score
0.0
Published
2025-10-11
Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
5.5
EPSS Score
0.0
Published
2025-10-11
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
5.9
EPSS Score
0.0
Published
2025-10-11
Identity authentication bypass vulnerability in the Gallery app. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score
6.2
EPSS Score
0.0
Published
2025-10-11
Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality
CVSS Score
6.2
EPSS Score
0.0
Published
2025-10-11
An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of file checking in the saveFiles function in /jeewms/cgUploadController.do. An attacker with normal privileges was able to upload a malicious file that would lead to remote code execution.
CVSS Score
6.5
EPSS Score
0.001
Published
2025-10-10
code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations.
CVSS Score
9.9
EPSS Score
0.0
Published
2025-10-10
code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing this room information
CVSS Score
4.1
EPSS Score
0.0
Published
2025-10-10