3727 matches found
CVE-2025-68474
creationtimestamp| type| source ---|---|--- 2025-12-27 02:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mawsmxdzzl2y...
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27
CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27. A patched version of the package is available...
Elasticsearch 7.0.x < 8.19.8 / 9.0.x < 9.1.8 / 9.2.x < 9.2.2 (ESA-2025-27)
The version of Elasticsearch installed on the remote host is 7.0 prior to 8.19.8, 9.0 prior to 9.1.8, or 9.2.0 prior to 9.2.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2025-27 advisory. - Insertion of sensitive information in log file in Elasticsearch can lead to los...
CVE-2025-67887
creationtimestamp| type| source ---|---|--- 2025-12-18 15:00:09+00:00| published-proof-of-concept| Telegram/7hKD5YeJK0RQiIJ3OrJi5geFO0owuRt0spxMlfyZ7RMSrKY 2026-04-27 20:30:12+00:00| seen| https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9 2026-05-08 09:20:02+00:00| seen|...
CVE-2025-65530
creationtimestamp| type| source ---|---|--- 2025-12-12 19:32:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7std6b6aw2r 2026-01-07 00:07:35+00:00| seen| https://gist.github.com/aleksejspopovs/a5f757871c6bd16fab471e5cdd231061 2026-01-09 12:34:22+00:00| seen|...
CVE-2025-14310
creationtimestamp| type| source ---|---|--- 2025-12-09 19:27:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7lbneycch2n...
AZL-71575 CVE-2025-65637 affecting package flannel for versions less than 0.14.0-27
A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving...
CVE-2025-66302
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A path traversal vulnerability has been identified in Grav CMS, allowing authenticated attackers with administrative privileges to read arbitrary files on the underlying server filesystem. This vulnerability arises due to insufficient inp...
CVE-2025-66303
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A Denial of Service DoS vulnerability has been identified in Grav related to the handling of scheduledat parameters. Specifically, the application fails to properly sanitize input for cron expressions. By manipulating the scheduledat...
CVE-2025-66296
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a privilege escalation vulnerability exists in Grav’s Admin plugin due to the absence of username uniqueness validation when creating users. A user with the create user permission can create a new account using the same username as an...
CVE-2025-66298
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, having a simple form on site can reveal the whole Grav configuration details including plugin configuration details by using the correct POST payload to exploit a Server-Side Template SST vulnerability. Sensitive information may be...
CVE-2025-66299
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, Grav CMS is vulnerable to a Server-Side Template Injection SSTI that allows any authenticated user with editor permissions to execute arbitrary code on the remote server, bypassing the existing security sandbox. Since the security sandbox...
CVE-2025-66300
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using "Frontmatter" form. This includes Grav user account files /grav/user/accounts/.yaml, which store hashed user password, 2FA secret, and the password...
CVE-2025-66294
Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injection SSTI vulnerability exists in Grav that allows authenticated attackers with editor permissions to execute arbitrary commands on the server and, under certain conditions, may also be exploited by...
GHSA-G2JX-37X6-6438
creationtimestamp| type| source ---|---|--- 2025-12-02 19:06:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115651535641586409...
EUVD-2025-200076
Grav is vulnerable to Server-Side Template Injection SSTI via Forms...
EUVD-2025-200081
Grav is vulnerable to RCE via SSTI through Twig Sandbox Bypass...
EUVD-2025-200105
Grav vulnerable to Denial of Service via Improper Input Handling in 'Supported' Parameter...