CVE-2025-49735

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:54:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti6pyztk52e 2025-07-09 06:23:18+00:00| seen|...

CVE-2025-49739

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review 2025-07-08 20:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lti3tz2nmq2e...

CVE-2025-48815

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

CVE-2025-36350

creationtimestamp| type| source ---|---|--- 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

CVE-2025-0293

CVE-2025-0293 describes a CLRF injection on Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS). A remote authenticated attacker with admin rights can write to a protected configuration file on disk via the vulnerable code paths. Affected versions are ICS < 22.7R2.8 and IPS

CVE-2025-0293

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk...

CVE-2025-53372 node-code-sandbox-mcp has a Sandbox Escape via Command Injection

node-code-sandbox-mcp is a Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript. Prior to 1.3.0, a command injection vulnerability exists in the node-code-sandbox-mcp MCP Server. The vulnerability is caused by the unsanitized use o...

CVE-2025-40711

creationtimestamp| type| source ---|---|--- 2025-07-08 13:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthgzhddpz2l...

CVE-2025-40712

creationtimestamp| type| source ---|---|--- 2025-07-08 13:29:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthft6rejm2b...

CVE-2025-40742

creationtimestamp| type| source ---|---|--- 2025-07-08 13:21:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lthfegyd4a2f 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-06 2025-07-18 06:30:14+00:00| seen| https://t.me/icscert/1242...

CVE-2025-27057

creationtimestamp| type| source ---|---|--- 2025-07-08 13:19:01+00:00| seen| https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen|...

CVE-2025-27050

Memory corruption while processing event close when client process terminates abruptly...

CVE-2025-27056

Memory corruption during sub-system restart while processing clean-up to free up resources...

CVE-2025-21445

Memory corruption while copying the result to the transmission queue which is shared between the virtual machine and the host...

CVE-2025-27052 Buffer Copy Without Checking Size of Input in Core Services

Memory corruption while processing data packets in diag received from Unix clients...

CVE-2025-21008

Out-of-bounds read in decoding frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...

CVE-2025-20982

Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-21009

Out-of-bounds read in decoding malformed frame header in libsavsvc.so prior to Android 15 allows local attackers to cause memory corruption...

CVE-2025-21005

Improper access control in isemtelephony prior to Android 15 allows local attackers to access sensitive information...

CVE-2025-21005

The CVE-2025-21005 entry concerns the isemtelephony component, with the issue described as improper access control. Affected software isemtelephony is prior to Android 15, where local attackers could access sensitive information due to insufficient access restrictions. The PT Security advisory (P...