CVE-2025-47917

Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtlsx509stringtonames takes a head argument that is documented as an output argument. The documentation does not suggest that the function...

CVE-2025-46384

creationtimestamp| type| source ---|---|--- 2025-07-20 16:41:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufw6haxnv2j...

CVE-2025-7882

creationtimestamp| type| source ---|---|--- 2025-07-20 14:56:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufqcjraqn27...

CVE-2025-7896

Summary: CVE-2025-7896 affects harry0703 MoneyPrinterTurbo up to v1.2.6. Affected component: download_video/delete_video in app/controllers/v1/video.py. Issue: path traversal allows remote exploitation via crafted input. Local/remote impact described as potential access to files outside the inten...

CVE-2025-46383

CVE-2025-46383 is an XSS issue described across multiple sources as improper neutralization of input during web page generation (CWE-79) affecting Emby Server/Emby Windows deployments. Public entries and OpenVAS notes indicate at least Emby Server versions prior to 4.8.9 are affected, with the un...

CVE-2025-7894

A vulnerability, which was classified as critical, has been found in Onyx up to 0.29.1. This issue affects the function generatesimplesql of the file backend/onyx/agents/agentsearch/kbsearch/nodes/a3generatesimplesql.py of the component Chat Interface. The manipulation leads to sql injection. The...

CVE-2025-7878

creationtimestamp| type| source ---|---|--- 2025-07-20 12:30:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lufi5qtvn42i 2025-07-22 03:54:24+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071 2025-09-09 11:53:41+00:00| seen| MISP/a3c5beab-b790-4171-8b4c-02c8a9678071...

CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

CVE-2025-7864

creationtimestamp| type| source ---|---|--- 2025-07-20 07:16:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luewlbjema2i...

CVE-2025-7866

creationtimestamp| type| source ---|---|--- 2025-07-20 07:11:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luewcd4bsa2i...

CVE-2025-7862

creationtimestamp| type| source ---|---|--- 2025-07-20 07:01:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luevqfy7js2o 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-26 2025-09-09 20:56:45+00:00| seen|...

CVE-2025-54314

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."...

CVE-2025-7857

creationtimestamp| type| source ---|---|--- 2025-07-20 03:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lueiuv5ku42t...

CVE-2025-7858

creationtimestamp| type| source ---|---|--- 2025-07-20 03:01:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lueicuxicd2t...

CVE-2025-54314

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with arguments that are controlled by Thor, and there is no way an attacker can take control of those arguments."...

CVE-2025-7829

creationtimestamp| type| source ---|---|--- 2025-07-19 18:26:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludlkz7k6x2h...

CVE-2025-38351

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush In KVM guests with Hyper-V hypercalls enabled, the hypercalls HVCALLFLUSHVIRTUALADDRESSLIST and HVCALLFLUSHVIRTUALADDRESSLISTEX allow a guest to request...

CVE-2025-6721

creationtimestamp| type| source ---|---|--- 2025-07-19 08:56:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lucloupwl32o...

CVE-2025-52924

creationtimestamp| type| source ---|---|--- 2025-07-19 06:15:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luccqi7tl22i...

CVE-2025-47189

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data of certain user flows, a different vulnerability than CVE-2025-54392...