Skip to main content

CWE archive

CWE-925 CVEs

Programmatic archive

3 CVEs tagged with CWE-9251 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.

CVE-2026-33173

Published Mar 24, 2026

Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` accepts arbitrary met…

CVSS 5.3 · Medium
evidence mentions
7
Buzz score
25.8
Vendor/product tagsBeta · best-effort

CVE-2024-10576

Published Dec 4, 2024

Infinix devices contain a pre-loaded "com.transsion.agingfunction" application, that exposes an unsecured broadcast receiver. An attacker can communicate with the receiver and for…

CVSS 9.4 · Critical

CVE-2023-44126

Published Sep 27, 2023

The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all thir…

CVSS 3.6 · Low
Vendor/product tagsBeta · best-effort
Showing 1-3 of 3 CVEsPage 1 of 1