CVE-2025-20981

Improper access control in AudioService prior to SMR Jun-2025 Release 1 allows local attackers to access sensitive information...

CVE-2025-5399

creationtimestamp| type| source ---|---|--- 2025-06-04 03:48:34+00:00| seen| https://daniel.haxx.se/blog/2025/06/04/curl-8-14-1/ 2025-06-04 03:55:03+00:00| seen| https://seclists.org/oss-sec/2025/q2/208 2025-06-04 05:53:55+00:00| seen|...

CVE-2025-5532

The CVE-2025-5532 issue affects the Campus Directory – Faculty, Staff & Student Directory Plugin for WordPress. It is a Stored Cross-Site Scripting vulnerability in the emd_mb_meta shortcode, present in all versions up to 1.9.0. Exploitation requires authenticated access at contributor level or h...

CVE-2025-20675

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413201; Issue ID: MSV-3302...

CVE-2025-20676

In wlan STA driver, there is a possible system crash due to an uncaught exception. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00412240; Issue ID: MSV-3293...

CVE-2025-5552

creationtimestamp| type| source ---|---|--- 2025-06-04 02:46:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqryilcl352...

CVE-2025-49223

creationtimestamp| type| source ---|---|--- 2025-06-04 02:45:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqryct2mia2 2025-06-04 09:10:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/39216 2025-06-04 15:00:07+00:00...

CVE-2025-5548

creationtimestamp| type| source ---|---|--- 2025-06-04 01:23:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqqnayud43n2 2025-06-04 01:31:30+00:00| published-proof-of-concept| Telegram/zUVTgXvzkwLEqz2FR1DEMSQdpoQl8zaI1Yp9yK0vMGoKWE...

CVE-2025-27955

Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information and execute arbitrary code...

CVE-2025-29093

File Upload vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Content/Gallery/Images component...

CVE-2025-46203

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/id endpoint...

CVE-2025-46204

An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/id endpoint...

SUSE: Security Advisory (SUSE-SU-2024:1967-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-5542 TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument servicetype leads to cross site scripting. It is possible...

CVE-2025-5542

TOTOLINK X2000R 1.0.0-B20230726.1108 is affected by a cross-site scripting vulnerability in the Virtual Server Page (file /boafrm/formPortFw). The root cause is manipulation of the service_type parameter, which can be exploited remotely to trigger XSS. Exploit has been disclosed publicly. No patc...

CVE-2025-49000

InvenTree is an Open Source Inventory Management System. Prior to version 0.17.13, the skip field in the built-in label-sheet plugin lacks an upper bound, so a large value forces the server to allocate an enormous Python list. This lets any authenticated label-printing user trigger a...

CVE-2025-49002

DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in...

CVE-2025-23102

creationtimestamp| type| source ---|---|--- 2025-06-03 21:09:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq77zpe3u2a 2025-06-03 21:23:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7yvmilo2o...

WordPress Campus Directory plugin <= 1.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Campus Directory versions = 1.9.0...

CVE-2025-5509

creationtimestamp| type| source ---|---|--- 2025-06-03 19:01:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpy2nx7tt2e 2026-02-07 13:40:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116029627496040824...