6716 matches found
CVE-2025-27076
Memory corruption while processing simultaneous requests via escape path...
CVE-2025-27069
Memory corruption while processing DDI command calls...
CVE-2025-34148
creationtimestamp| type| source ---|---|--- 2025-08-08 06:01:22+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvulat6l5q2d 2025-08-11 15:39:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115010881354876002...
CVE-2025-38422 affecting package kernel for versions less than 6.6.96.1-1
CVE-2025-38422 affecting package kernel for versions less than 6.6.96.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-8581
Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2025-54784
creationtimestamp| type| source ---|---|--- 2025-08-07 05:54:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvs2fc7mzm2e...
CVE-2025-8579
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2025-8578
Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-8581
Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2025-8582
Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...
CVE-2025-8577
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-32094
creationtimestamp| type| source ---|---|--- 2025-08-07 00:55:38+00:00| seen| https://mstdn.social/users/jschauma/statuses/114984755987991085 2025-08-07 00:56:02+00:00| seen| https://bsky.app/profile/jschauma.mstdn.social.ap.brid.gy/post/3lvrjprxufat2 2025-08-07 09:45:17+00:00| seen|...
CVE-2025-55137
LinkJoin through 882f196 mishandles lacks type checking in password reset...
CVE-2025-55134
In Agora Foundation Agora fall23-Alpha1 before b087490, there is XSS via tag in client/agora/public/js/editorManager.js...
CVE-2025-8667
creationtimestamp| type| source ---|---|--- 2025-08-06 21:05:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvr4tjupc426...
CVE-2025-8419
creationtimestamp| type| source ---|---|--- 2025-08-06 20:55:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvr4blmsez2s...
CVE-2025-7771
creationtimestamp| type| source ---|---|--- 2025-08-06 16:29:10+00:00| seen| https://poliverso.org/objects/0477a01e-b9b15122-a4c6f440754a3234 2025-08-07 13:24:32+00:00| seen| https://bsky.app/profile/technadu.com/post/3lvstk5lvjs2m 2025-08-07 21:02:23+00:00| seen|...
CVE-2025-7202 Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights
A Cross-Site Request Forgery CSRF in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights...
CVE-2025-54571
A flaw was found in modsecurity. The engine may allow attackers to manipulate the HTTP response’s Content-Type header, enabling them to influence downstream processes or applications. This manipulation can be achieved remotely without authentication. Consequently, an attacker can alter the expect...
