23602 matches found
CVE-2025-3857
When reading binary Ion data through Amazon.IonDotnet using the RawBinaryReader class, Amazon.IonDotnet does not check the number of bytes read from the underlying stream while deserializing the binary format. If the Ion data is malformed or truncated, this triggers an infinite loop condition tha...
GHSA-47F6-5GQ3-VX9C
creationtimestamp| type| source ---|---|--- 2025-04-21 16:03:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12699...
CVE-2024-12543
creationtimestamp| type| source ---|---|--- 2025-04-21 16:02:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12690 2025-04-21 18:59:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lndtv7oqmo2c 2025-04-21 19:49:43+00:00| seen| https://t.me/cvedetector/23457 2025-08-09...
CVE-2025-32431 Traefik has a possible vulnerability with the path matchers
Traefik pronounced traffic is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-rc2. There is a potential vulnerability in Traefik managing the requests using a PathPrefix, Path or PathRegex matcher. When Traefik is configured to route the requests to a backe...
CVE-2025-3845
creationtimestamp| type| source ---|---|--- 2025-04-21 13:33:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114376204842073505 2025-04-21 23:02:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12769 2025-04-21 23:04:15+00:00| seen|...
CVE-2024-41092
creationtimestamp| type| source ---|---|--- 2025-04-21 13:32:31+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lndbn7ih6n2z 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...
CVE-2025-3840
An improper neutralization of input vulnerability was identified in the End of Life EOL OVA based connect installer component which is deployed for installation purposes in a customer network. This EOL component was deprecated in September 2023 with end of support extended till January 2024. An...
CVE-2025-25228 Extension - virtuemart.net - SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla
A SQL injection in VirtueMart component 1.0.0 - 4.4.7 for Joomla allows authenticated attackers administrator to execute arbitrary SQL commands in the product management area in backend...
CVE-2025-37838
In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: Fix use after free vulnerability in ssiprotocol Driver Due to Race Condition In the ssiprotocolprobe function, &ssi-;work is bound with ssipxmitwork, In ssippnsetup, the ssippnxmit function within the ssippnops...
CVE-2025-43970
An issue was discovered in GoBGP before 3.35.0. pkg/packet/mrt/mrt.go does not properly check the input length, e.g., by ensuring that there are 12 bytes or 36 bytes depending on the address family...
CVE-2025-43972
creationtimestamp| type| source ---|---|--- 2025-04-21 01:02:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12630 2025-04-21 01:51:05+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114373444529201097 2025-04-21 02:49:20+00:00| seen|...
CVE-2025-43963
In LibRaw before 0.21.4, phaseonecorrect in decoders/loadmfbacks.cpp allows out-of-buffer access because splitcol and splitrow values are not checked in 0x041f tag processing...
CVE-2025-43963
creationtimestamp| type| source ---|---|--- 2025-04-21 00:05:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12625 2025-04-21 02:49:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnc5oxjmmm2b 2025-04-21 03:56:13+00:00| seen|...
CVE-2025-43964
creationtimestamp| type| source ---|---|--- 2025-04-21 00:05:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12624 2025-04-21 02:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnc5oy57qf2t 2025-04-21 03:56:14+00:00| seen|...
CVE-2025-43972
An issue was discovered in GoBGP before 3.35.0. An attacker can cause a crash in the pkg/packet/bgp/bgp.go flowspec parser by sending fewer than 20 bytes in a certain context...
CVE-2025-43916
CVE-2025-43916 affects Sonos api.sonos.com (endpoint /login/v3/oauth). The flaw allows a redirect_uri containing userinfo in the authority component, violating RFC 6819 5.2.3.5 and potentially causing an authorization code to be sent to an attacker-controlled destination. Public-fix details are n...
CVE-2025-29287
An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file...
