2451 matches found
CVE-2025-54009
CVE-2025-54009 corresponds to a stored XSS vulnerability in Crocoblock JetSmartFilters (affected versions up to and including 3.6.8). The underlying issue is improper neutralization of input during web page generation, enabling attackers to inject malicious scripts. Public references in the conne...
CVE-2025-50102
A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with network access via multiple protocols to cause a crash in the MySQL server...
CVE-2025-32988
A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name SAN entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure on an ASN.1 node it do...
CVE-2025-6742
creationtimestamp| type| source ---|---|--- 2025-07-09 09:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjindain52i...
Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery
Vulnerability Details Affected Vendor: Schneider Electric Affected Product: EcoStruxure IT Data Center Expert Affected Version: 8.3 and prior Platform: CentOS CWE Classification: CWE-918: Server-Side Request Forgery SSRF CVE ID: CVE-2025-50125 2. Vulnerability Description The Data Center Expert...
Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation
Vulnerability Details Affected Vendor: Schneider Electric Affected Product: EcoStruxure IT Data Center Expert Affected Version: 8.3 and prior Platform: CentOS CWE Classification: CWE-266: Incorrect Privilege Assignment CVE ID: CVE-2025-50124 2. Vulnerability Description The Data Center Expert...
CVE-2025-497007
creationtimestamp| type| source ---|---|--- 2025-07-08 16:24:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215 2025-07-19 09:40:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215...
CVE-2025-48821
creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...
Security Bulletin: Maximo AI Service Component: Spring Security Aspects may not correctly locate method security annotations on private methods.
Summary Security Bulletin: Maximo AI Service Component Component uses Spring Security Aspects may not correctly locate method security annotations on private methods.This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-22233...
CVE-2025-52521
creationtimestamp| type| source ---|---|--- 2025-07-06 21:40:06+00:00| seen| https://bsky.app/profile/osanpo.bsky.social/post/3ltdaczrkck2s 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-585/...
CVE-2025-6786
creationtimestamp| type| source ---|---|--- 2025-07-04 07:25:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4pn3cgjw2r...
WordPress Radio Station plugin <= 2.5.12 - Cross Site Request Forgery (CSRF) Vulnerability
Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Ngoc Quang Bach maysbachs in WordPress Plugin Radio Station versions = 2.5.12...
CVE-2025-38173
In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher requests Do not access random memory for zero-length skcipher requests. Just return 0...
CVE-2025-27449
creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:23+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885 2025-07-03 06:23:55+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2...
CVE-2025-45813
creationtimestamp| type| source ---|---|--- 2025-07-02 21:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz6j6moub2m...
Exploit for CVE-2025-6934
🛡️ CVE-2025-6934 - Unauthenticated Privilege Escalation in Opa...
CVE-2025-6891
creationtimestamp| type| source ---|---|--- 2025-06-30 06:37:27+00:00| seen| https://bsky.app/profile/potato.software/post/3lssl3i4jwq2b 2025-06-30 06:58:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19902 2025-06-30 10:48:57+00:00| seen|...
Security advisory: Recently reported incomplete cleanup issue in Qt's Schannel handling can impact Qt
There is a "Incomplete Cleanup" problem in Qt’s Schannel handling when it is used to provide a server handling incoming TLS connections. This has been assigned the CVE id CVE-2025-6338. Affected versions: This issue affects only the Schannel functionality on Windows if it is turned on in Qt 5.15...
CVE-2025-53107
creationtimestamp| type| source ---|---|--- 2025-06-29 11:39:32+00:00| published-proof-of-concept| https://github.com/cyanheads/git-mcp-server/security/advisories/GHSA-3q26-f695-pp76 2025-07-01 18:08:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20067 2025-07-01...