CVE-2025-20653

CVE-2025-20653

Título es
CVE-2025-20653

Lun, 03/03/2025 – 03:15

Tipo
CWE-190

Gravedad 2.0 Txt
Pendiente de análisis

Título en

CVE-2025-20653

Descripción en
In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue ID: MSV-2046.

03/03/2025

03/03/2025

Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
Pendiente de análisis

Referencias


  • https://corp.mediatek.com/product-security-bulletin/March-2025

    • Enviar en el boletín
    Off

    CVE-2025-20652

    CVE-2025-20652

    Título es
    CVE-2025-20652

    Lun, 03/03/2025 – 03:15

    Tipo
    CWE-125

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-20652

    Descripción en
    In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291215; Issue ID: MSV-2052.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://corp.mediatek.com/product-security-bulletin/March-2025

    • Enviar en el boletín
    Off

    CVE-2025-25953

    CVE-2025-25953

    Título es
    CVE-2025-25953

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-25953

    Descripción en
    Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 was discovered to contain an Azure JWT access token exposure. This vulnerability allows authenticated attackers to escalate privileges and access sensitive information.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89640

    • Enviar en el boletín
    Off

    CVE-2025-25952

    CVE-2025-25952

    Título es
    CVE-2025-25952

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-25952

    Descripción en
    An Insecure Direct Object References (IDOR) in the component /getStudemtAllDetailsById?studentId=XX of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information via a crafted API request.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89639

    • Enviar en el boletín
    Off

    CVE-2025-25951

    CVE-2025-25951

    Título es
    CVE-2025-25951

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-25951

    Descripción en
    An information disclosure vulnerability in the component /rest/cb/executeBasicSearch of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to access sensitive user information.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89638

    • Enviar en el boletín
    Off

    CVE-2025-25950

    CVE-2025-25950

    Título es
    CVE-2025-25950

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-25950

    Descripción en
    Incorrect access control in the component /rest/staffResource/update of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89637

    • Enviar en el boletín
    Off

    CVE-2025-25949

    CVE-2025-25949

    Título es
    CVE-2025-25949

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-25949

    Descripción en
    A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the User ID parameter at /rest/staffResource/update.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89636

    • Enviar en el boletín
    Off

    CVE-2025-27585

    CVE-2025-27585

    Título es
    CVE-2025-27585

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-27585

    Descripción en
    A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Print Name parameter at /rest/staffResource/update.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89636

    • Enviar en el boletín
    Off

    CVE-2025-27584

    CVE-2025-27584

    Título es
    CVE-2025-27584

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-27584

    Descripción en
    A stored cross-site scripting (XSS) vulnerability in Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the First Name parameter at /rest/staffResource/update.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-89636

    • Enviar en el boletín
    Off

    CVE-2025-27583

    CVE-2025-27583

    Título es
    CVE-2025-27583

    Lun, 03/03/2025 – 01:15

    Gravedad 2.0 Txt
    Pendiente de análisis

    Título en

    CVE-2025-27583

    Descripción en
    Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Information System (SIS) EagleR v1.0.118 allows create and modify user accounts, including an Administrator account.

    03/03/2025

    03/03/2025

    Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
    Pendiente de análisis

    Referencias


  • https://github.com/VvV1per/Vulnerability-Research-CVEs/tree/main/CVE-2024-53637

    • Enviar en el boletín
    Off