23603 matches found
CVE-2025-21442
Memory corruption while transmitting packet mapping information with invalid header payload size...
CVE-2025-21439
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...
CVE-2025-21440
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21435
Transient DOS may occur while parsing extended IE in beacon...
CVE-2017-20197
CVE-2017-20197 affects propanetank Roommate-Bill-Tracking; vulnerable component is unknown code in /includes/login.php where manipulating the Username parameter leads to SQL injection. Attack can be remotely initiated. Patch name: b32bb1b940f82d38fb9310cd66ebe349e20a1d0a. Remediation: apply the p...
CVE-2024-33058
Memory corruption while assigning memory from the source DDR memoryHLOS to ADSP...
CVE-2025-27797
creationtimestamp| type| source ---|---|--- 2025-04-09 09:47:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11030 2025-04-09 11:48:41+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114307846667500911 2025-04-09 12:35:34+00:00| seen| https://t.me/cvedetector/22549...
CVE-2025-25213
Improper restriction of rendered UI layers or frames issue exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If a user views and clicks on the content on the malicious page while logged in, unintended operations may be performed...
CVE-2025-22871
A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed LF instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to se...
CVE-2025-20952
Improper access control in Mdecservice prior to SMR Apr-2025 Release 1 allows local attackers to access arbitrary files with system privilege...
CVE-2025-31498
A flaw was found in c-ares. This vulnerability allows a remote or local attacker to cause a use-after-free, potentially leading to application-level denial of service or other unexpected behavior via manipulation of DNS responses or network conditions during query processing. Mitigation Mitigatio...
CVE-2024-8243
creationtimestamp| type| source ---|---|--- 2025-04-09 06:48:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11023 2025-04-09 07:32:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmehvt6jnd2z 2025-04-09 10:04:55+00:00| seen|...
CVE-2024-6860
The WP MultiTasking WordPress plugin through 0.1.12 does not have CSRF check when updating its permalink suffix settings, which could allow attackers to make logged admins perform such action via a CSRF attack...
BELL-CVE-2025-22009
Bulletin has no description...
CVE-2024-58124
Access control vulnerability in the security verification module Impact: Successful exploitation of this vulnerability will affect integrity and confidentiality...
CVE-2025-32464
HAProxy 2.2 through 3.1.6, in certain uncommon configurations, has a sampleconvregsub heap-based buffer overflow because of mishandling of the replacement of multiple short patterns with a longer one...
CVE-2025-3481
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-245/ 2025-05-22 01:42:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17218 2025-05-22 04:46:07+00:00| seen|...
CVE-2025-30679
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-237/...
CVE-2025-30641
creationtimestamp| type| source ---|---|--- 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-240/ 2025-04-24 20:35:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lnlkookgds2g 2025-04-26 06:32:16+00:00| seen|...