23691 matches found
CVE-2025-6805
Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...
CVE-2025-5924
creationtimestamp| type| source ---|---|--- 2025-07-07 15:14:14+00:00| seen| Telegram/ISXgwPdrIpRTPMpLikF2rIbDIPtvkDdpffH6-8WgNXxkQ...
CVE-2025-6712 MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation
MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory...
CVE-2025-3467
creationtimestamp| type| source ---|---|--- 2025-07-07 11:24:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lteoeysjn22r...
CVE-2025-53171
Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...
CVE-2025-6812
creationtimestamp| type| source ---|---|--- 2025-07-07 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-473/ 2025-07-25 09:01:28+00:00| seen| https://bsky.app/profile/neodyme.io/post/3lurorz42sk2n...
CVE-2025-53181
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...
CVE-2025-47227
In the Production Environment extension in Netmake ScriptCase through 9.12.006 23, the Administrator password reset mechanism is mishandled. Making both a GET and a POST request to login.php.is sufficient. An unauthenticated attacker can then bypass authentication via administrator account takeov...
CVE-2024-25176
LuaJIT through 2.1 and OpenRusty luajit2 before v2.1-20240626 have a stack-buffer-overflow in ljstrfmtwfnum in ljstrfmtnum.c...
CVE-2025-7092
creationtimestamp| type| source ---|---|--- 2025-07-06 23:25:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltdg6su4fi2r...
CVE-2024-31964
creationtimestamp| type| source ---|---|--- 2025-07-06 21:00:05+00:00| published-proof-of-concept| Telegram/xQTTeOMhEvaRKE-blVvlA6GjVAFaO0GxzrRLbwtRl6cec 2025-07-20 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lugeqfi5mr2d...
CVE-2025-38181
In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipsoreqset,delattr. syzkaller reported a null-ptr-deref in sockomalloc while allocating a CALIPSO option. 0 The NULL is of struct sock, which was fetched by sktofullsk in calipsoreqsetattr. Since...
CVE-2025-49302
Improper Control of Generation of Code 'Code Injection' vulnerability in Scott Paterson Easy Stripe easy-stripe allows Remote Code Inclusion.This issue affects Easy Stripe: from n/a through = 1.1...
CVE-2025-38206
In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayedfree The double free could happen in the following path. exfatcreateupcasetable exfatcreateupcasetable : return error exfatfreeupcasetable : free -volutbl exfatloaddefaultupcasetable : return erro...
CVE-2025-38208
In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automountfullpath page is checked for null in buildpathfromdentryoptionalprefix when tcon-originfullpath is not set. However, the check is missing when it is set. Add a check to prevent a potential...
CVE-2025-38235
In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletbbacklight" backlight device reference counting During appletbkbdprobe, probe attempts to get the backlight device by name. When this happens backlightdevicegetbyname looks for a device in the backlig...
CVE-2025-38189
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Avoid NULL pointer dereference in v3djobupdatestats The following kernel Oops was recently reported by Mesa CI: 800.139824 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000588 800.148619 M...
CVE-2025-38220
In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionally reproduces a crash that looks as follows: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... Call Trace:...