CVE-2025-48074

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance...

CVE-2025-41371

creationtimestamp| type| source ---|---|--- 2025-08-01 15:06:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdwhmmnna2a 2025-08-02 10:31:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvfxkl755q2d...

CVE-2025-41376

creationtimestamp| type| source ---|---|--- 2025-08-01 14:56:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdvvomoqd2e...

CVE-2025-5921

creationtimestamp| type| source ---|---|--- 2025-08-01 08:58:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdbub43ca2d...

CVE-2025-43191

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to cause a denial-of-service...

CVE-2025-43189

This issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. A malicious app may be able to read kernel memory...

CVE-2025-45767

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommended security standards" does not reflect guidance in a final publication...

CVE-2025-52361

CVE-2025-52361 affects AK-Nord USB-Server-LXL Firmware up to v0.0.16 Build 2023-03-13. The root cause is insecure permissions on the /etc/init.d/lighttpd script, which is executed with root privileges during system boot and on any interaction. A locally authenticated low-privilege user can modify...

PT-2025-31610 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The Apache HTTP Server is susceptible to a Cross-Site Request Forgery issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

CVE-2025-53399

In Sipwise rtpengine before 13.4.1.1, an origin-validation error in the endpoint-learning logic of the media-relay core allows remote attackers to inject or intercept RTP/SRTP media streams via RTP packets except when the relay is configured for strict source and learning disabled. Version 13.4.1...

CVE-2025-48071

creationtimestamp| type| source ---|---|--- 2025-07-31 23:52:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvcdeoqrfy2k 2025-08-13 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-834/...

CVE-2025-48072

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation due to bad pointer math when decompressing DWAA-packed scan-line EXR...

CVE-2025-45768

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...

CVE-2025-8426 Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

CVE-2025-8426

CVE-2025-8426 concerns Marvell QConvergeConsole. The issue is in the compressConfigFiles method where user-supplied paths are not properly validated before file operations, enabling a directory-traversal attack that can disclose sensitive information and trigger a denial-of-service condition. Exp...

CVE-2025-50340

creationtimestamp| type| source ---|---|--- 2025-07-31 15:00:06+00:00| seen| Telegram/cWtiHx103QDqzsPEFibXmjg0nuYdbQyVZSdVVVBXQwi1FA 2025-08-06 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvr4oauhqc2h...

CVE-2025-7738 Python3.11-django-ansible-base: sensitive authenticator secrets returned in clear text via api in aap

A flaw was found in Ansible Automation Platform AAP where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users...

CVE-2025-41688

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

CVE-2025-8286

creationtimestamp| type| source ---|---|--- 2025-07-31 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-212-01 2025-07-31 20:05:09+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lvbwobpueh2i 2025-07-31 23:12:23+00:00| seen|...

CVE-2025-46359

creationtimestamp| type| source ---|---|--- 2025-07-31 09:01:18+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvarl7ddfa2e 2025-07-31 11:15:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvaz3gzncq2p...