Vulnerabilities (CVE)

Total 398490 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-37092 1 Hpe 1 Storeonce System 2026-06-17 N/A 9.8 CRITICAL
A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
CVE-2025-37091 1 Hpe 1 Storeonce System 2026-06-17 N/A 7.2 HIGH
A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
CVE-2025-37090 1 Hpe 1 Storeonce System 2026-06-17 N/A 9.8 CRITICAL
A server-side request forgery vulnerability exists in HPE StoreOnce Software.
CVE-2025-37089 1 Hpe 1 Storeonce System 2026-06-17 N/A 9.8 CRITICAL
A command injection remote code execution vulnerability exists in HPE StoreOnce Software.
CVE-2025-37088 2026-06-17 N/A 6.8 MEDIUM
A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on race conditions and configuration, this vulnerability may lead to local/cluster unauthorized access.
CVE-2025-37087 2026-06-17 N/A 9.8 CRITICAL
A vulnerability in the cmdb service of the HPE Performance Cluster Manager (HPCM) could allow an attacker to gain access to an arbitrary file on the server host.
CVE-2025-36938 1 Google 1 Android 2026-06-17 N/A 6.8 MEDIUM
In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36937 1 Google 1 Android 2026-06-17 N/A 9.8 CRITICAL
In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36936 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36935 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36934 1 Google 1 Android 2026-06-17 N/A 7.4 HIGH
In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36932 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36931 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36930 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36929 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36928 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36927 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36925 1 Google 1 Android 2026-06-17 N/A 7.8 HIGH
In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36924 1 Google 1 Android 2026-06-17 N/A 8.0 HIGH
In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2025-36923 1 Google 1 Android 2026-06-17 N/A 8.0 HIGH
In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.