6716 matches found
CVE-2025-8435
creationtimestamp| type| source ---|---|--- 2025-08-01 09:03:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdc57knc226 2025-08-02 02:24:34+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3lvf4dnf4nt22...
CVE-2025-8454
It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...
CVE-2025-4421
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...
CVE-2025-51954
playground.electronhub.ai v1.1.9 was discovered to contain a cross-site scripting XSS vulnerability...
CVE-2019-19144
XML External Entity Injection vulnerability in Quantum DXi6702 2.3.0.3 11449-53631 Build304 devices via rest/Users?action=authenticate...
CVE-2025-45770
jwt v5.4.3 was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant ...
CVE-2025-50847
creationtimestamp| type| source ---|---|--- 2025-07-31 19:52:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvbvx5v5ud2a...
CVE-2025-49082
creationtimestamp| type| source ---|---|--- 2025-07-31 00:36:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lv7vbmowseu2 2025-07-31 03:31:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lva76dsedh2q...
CVE-2025-45768
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...
CVE-2025-54426
Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. In versions prior to commit 36f70d1, the Curve25519Add and Curve25519ScalarMul precompiles incorrectly handle invalid Ristretto point representations. Instead of returning an error, they silently treat invali...
CVE-2025-54584 GitProxy is vulnerable to a packfile parsing exploit
GitProxy is an application that stands between developers and a Git remote endpoint e.g., github.com. In versions 1.19.1 and below, an attacker can craft a malicious Git packfile to exploit the PACK signature detection in the parsePush.ts file. By embedding a misleading PACK signature within comm...
CVE-2025-26332
TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. The attacker may be able to use the...
CVE-2025-54430 dedupe is vulnerable to secret exfiltration via `issue_comment`
dedupe is a python library that uses machine learning to perform fuzzy matching, deduplication and entity resolution quickly on structured data. Before commit 3f61e79, a critical severity vulnerability has been identified within the .github/workflows/benchmark-bot.yml workflow, where a issuecomme...
CVE-2025-54410
CVE-2025-54410 affects Moby (Docker Engine, Mirantis Container Runtime, and downstreams). A firewalld-related issue causes Docker to fail to re-create iptables rules that isolate bridge networks when firewalld reloads, allowing containers to reach ports across bridge networks on the same host. Th...
CVE-2025-54656
creationtimestamp| type| source ---|---|--- 2025-07-30 13:00:33+00:00| seen| https://seclists.org/oss-sec/2025/q3/65 2025-07-30 15:33:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lv6x2ced6t2t 2025-07-30 17:37:13+00:00| seen|...
CVE-2025-6495
creationtimestamp| type| source ---|---|--- 2025-07-30 04:19:52+00:00| seen| https://bsky.app/profile/wp-valley.bsky.social/post/3lv5rex4o7s26 2025-07-31 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvbzuj53ct2n...
Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update
An update for the virt:rhel and virt-devel:rhel module is now available for Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product...
CVE-2025-4425
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...
CVE-2025-4424 SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...