CWE-925

4 CVEs classified under CWE-925. Newest first, with CVSS severity, EPSS score and public exploits for each.

Top CVEs for CWE-925
CVESeverityScorePublishedSummary
CVE-2026-33173Medium5.32026-03-24Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` a…
CVE-2023-44126Low3.62023-09-27The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensit…
CVE-2026-211062026-09-09Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protect…
CVE-2024-105762024-12-04Infinix devices contain a pre-loaded "com.transsion.agingfunction" application, that exposes an unsecured broadcast receiver. An attacker can communicate with…
All CVEs classified under CWE-925 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-211062026-09-09Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protect…
CVE-2026-33173Medium5.32026-03-24Active Storage allows users to attach cloud and local files in Rails applications. Prior to versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, `DirectUploadsController` a…
CVE-2024-105762024-12-04Infinix devices contain a pre-loaded "com.transsion.agingfunction" application, that exposes an unsecured broadcast receiver. An attacker can communicate with…
CVE-2023-44126Low3.62023-09-27The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensit…