CVE-2025-37920

No description is available for this CVE...

CVE-2025-37898

No description is available for this CVE...

CVE-2025-37931

No description is available for this CVE...

CVE-2025-43714

The ChatGPT system through 2025-03-30 performs inline rendering of SVG documents instead of, for example, rendering them as text inside a code block, which enables HTML injection within most modern graphical web browsers...

CVE-2025-27998

CVE-2025-27998 affects Valve’s Steam Client (version 1738026274). The issue allows local privilege escalation via a crafted executable or DLL, with a CVSSv3.1 base score of 8.4 (HIGH) and impact on confidentiality, integrity, and availability. Affected component: Steam Client; root cause and exac...

CVE-2024-42922

AAPanel v7.0.7 was discovered to contain an OS command injection vulnerability...

CVE-2025-25539

CVE-2025-25539 concerns Vasco Self-Service Portal (v3.14 and earlier). The vulnerability is a Local File Inclusion in the Help menu that could disclose sensitive information. Exploitation context: remote attacker may access via the Help menu; CVSS v3.1 base score 6.5 (MEDIUM) with network attack ...

CVE-2025-45752

A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager...

CVE-2025-4871

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-4849

A vulnerability was found in TOTOLINK N300RH 6.1c.1390B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to command injection. The attack may be launched remotely...

CVE-2025-4834

A vulnerability was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. It has been classified as critical. Affected is an unknown function of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow...

CVE-2025-44888

creationtimestamp| type| source ---|---|--- 2025-05-20 23:13:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mpwsoq2j...

CVE-2025-37913

No description is available for this CVE...

CVE-2025-5001

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this...

CVE-2025-5001

A vulnerability was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. It has been declared as problematic. This vulnerability affects the function calloc of the file pspp-convert.c. The manipulation of the argument -l leads to integer overflow. Local access is required to approach this...

CVE-2025-4999

creationtimestamp| type| source ---|---|--- 2025-05-20 21:16:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmz3jgcorn2 2025-05-20 23:13:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mqypsw2t...

CVE-2025-44898

creationtimestamp| type| source ---|---|--- 2025-05-20 20:41:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17077 2025-05-20 23:13:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mqoau62t...

CVE-2025-4998

creationtimestamp| type| source ---|---|--- 2025-05-20 20:41:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17075 2025-05-20 21:15:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpmz2cokv4l2 2025-05-20...

CVE-2025-44894

creationtimestamp| type| source ---|---|--- 2025-05-20 20:41:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17074 2025-05-20 23:13:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpn7mqamdg2t...

CVE-2025-47290

containerd is a container runtime. A time-of-check to time-of-use TOCTOU vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0...