23596 matches found
CVE-2025-30087
Best Practical RT Request Tracker 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL...
CVE-2024-57336
M2Soft CROWNIX Report & ERS is affected by an improper access control flaw in versions 7.x through 7.4.3.599 and 8.x through 8.0.3.79, which can let an unauthenticated attacker obtain Administrator account access. Root cause: incorrect access control. Impact as stated: administrator takeover risk...
CVE-2025-32803
In some cases, Kea log files or lease files may be world-readable. This issue affects Kea versions 2.4.0 through 2.4.1, 2.6.0 through 2.6.2, and 2.7.0 through 2.7.8...
CVE-2025-48749
Netwrix Directory Manager formerly Imanami GroupID v11.0.0.0 and before & after v.11.1.25134.03 inserts Sensitive Information into Sent Data...
CVE-2025-4947
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...
CVE-2025-48927
CVE-2025-48927 concerns TeleMessage service configuring Spring Boot Actuator with an exposed /heapdump endpoint. Connected sources confirm the heapdump exposure stems from Actuator configuration and is implicated by multiple advisories (NVD entry, CISA KEV listing, and related GitHub/GHSA advisor...
ALSA-2025:8246 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: wifi: rtw89: Fix array index mistake in rtw89stainfogetiter CVE-2024-43842 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relat...
WordPress Likes and Dislikes Plugin plugin <= 1.0.0 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Nxploited in WordPress Plugin Likes and Dislikes versions = 1.0.0...
CVE-2025-2826
n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets. This can cause incoming packets to...
CVE-2025-5279
No description is available for this CVE...
CVE-2025-2872
creationtimestamp| type| source ---|---|--- 2025-05-27 21:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq6n46ybbw27...
CVE-2025-5280
Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-5280
Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-5281
Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5066
creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lf3ejtc52 2025-05-27 21:20:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114581884669361003 2025-05-29...
CVE-2025-5281
creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6letein772 2025-05-29 22:46:45+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lqdsdb5h7e2s 2025-06-03...
CVE-2025-5280
creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lektpjuo2 2025-05-27 21:47:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114581990758297927 2025-05-29...
CVE-2025-5067
creationtimestamp| type| source ---|---|--- 2025-05-27 20:59:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6lek3bfdi2 2025-05-29 22:46:52+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lqdsdhbecz2x 2025-06-03...
CVE-2025-5222
CVE-2025-5222 is a stack buffer overflow in the ICU library’s SRBRoot::addTag. Connected advisories indicate affected packages across distributions include ICU itself and dependent packages (e.g., nodejs and icu packages) with versions below patched releases (e.g., nodejs < 20.14.0-10, nodejs1...