CVE-2025-43185

A downgrade issue was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.6. An app may be able to access protected user data...

CVE-2025-43214

A memory handling issue in the WebKit engine allows an attacker to cause an unexpected Safari crash by processing maliciously crafted web content. This vulnerability affects Safari on macOS Sequoia , iOS , iPadOS , tvOS , visionOS , and watchOS , as well as the WebKitGTK library used in various L...

CVE-2025-31278

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption...

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-43213

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2025-43243

A permissions issue in Apple macOS allows an application to potentially modify protected parts of the file system . The vulnerability was addressed by implementing additional restrictions. This issue is fixed in macOS Sequoia 15.6 , macOS Sonoma 14.7.7 , and macOS Ventura 13.7.7 . Exploitation de...

CVE-2025-7848 Missing input check in lvpict.cpp used in NI LabVIEW

A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior...

CVE-2025-36010

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-5922

TSplus Remote Access Admin Tool stores the PIN hash in the system registry for versions below 18.40.6.17, and the hash is not salted, enabling potential brute-force attacks using rainbow tables. Patches are provided in v18.40.6.17 and in LTS lines: v17.2025.6.27 and v16.2025.6.27. Affected compon...

CVE-2025-7656 affecting package nodejs18 for versions less than 18.20.3-8

CVE-2025-7656 affecting package nodejs18 for versions less than 18.20.3-8. A patched version of the package is available...

CVE-2025-5587

creationtimestamp| type| source ---|---|--- 2025-07-29 13:29:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv47nl3blu2w...

CVE-2025-7458 SQLite integer overflow in key info allocation may lead to information disclosure.

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...

CVE-2025-40682

creationtimestamp| type| source ---|---|--- 2025-07-29 12:41:18+00:00| seen| https://bsky.app/profile/potato.software/post/3lv44wrajiz2c...

CVE-2025-53080

creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

CVE-2025-53081

creationtimestamp| type| source ---|---|--- 2025-07-29 09:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3srwdb2n2h 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

BELL-CVE-2025-38476

Bulletin has no description...

CVE-2025-4566

CVE-2025-4566 : Elementor Website Builder for WordPress is vulnerable to Stored XSS via the data-text attribute in the Text Path widget (Text Path). Affected: all versions up to 3.30.2. Exploitation requires authenticated access at Contributor level or higher; impact is script execution when a us...

CVE-2025-43239

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-678/...

CVE-2025-54766

creationtimestamp| type| source ---|---|--- 2025-07-29 01:10:33+00:00| seen| https://bsky.app/profile/jimbecher.bsky.social/post/3lv2wdmsm4s2k...

CVE-2025-28170

Grandstream Networks GXP1628 =1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files...