6723 matches found
CVE-2025-6495
creationtimestamp| type| source ---|---|--- 2025-07-30 04:19:52+00:00| seen| https://bsky.app/profile/wp-valley.bsky.social/post/3lv5rex4o7s26 2025-07-31 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvbzuj53ct2n...
Moderate: Red Hat Security Advisory: virt:rhel and virt-devel:rhel security update
An update for the virt:rhel and virt-devel:rhel module is now available for Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product...
CVE-2025-4425
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...
CVE-2025-4424 SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler
The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/productsecurity/home...
CVE-2025-43217
The issue was addressed by adding additional logic. This issue is fixed in iOS 18.6 and iPadOS 18.6, iPadOS 17.7.9. Privacy Indicators for microphone or camera access may not be correctly displayed...
CVE-2025-0712
CVE-2025-0712 concerns Elastic APM Server on Windows and its installer. A local attacker could exploit an uncontrolled search path element caused by insecure directory permissions during Windows installer usage, enabling local privilege escalation to SYSTEM. Affected: APM Server Windows installer...
CVE-2025-52187
GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting XSS in myprofileupdateform1.php...
CVE-2025-25692
A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...
CVE-2025-53022
TrustedFirmware-M (Trusted Firmware for M profile Arm CPUs) versions prior to 2.1.3 and 2.2.x before 2.2.1 are vulnerable to a stack-based buffer overflow (CWE-121) during a firmware upgrade. The Firmware Upgrade (FWU) module fails to validate the length field of the Type-Length-Value (TLV) struc...
CVE-2025-24119
This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...
CVE-2025-4674 Unexpected command execution in untrusted VCS repositories in cmd/go
The go command may execute unexpected commands when operating in untrusted VCS repositories. This occurs when possibly dangerous VCS configuration is present in repositories. This can happen when a repository was fetched via one VCS e.g. Git, but contains metadata for another VCS e.g. Mercurial...
CVE-2025-2537
creationtimestamp| type| source ---|---|--- 2025-07-29 19:31:51+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lv4tuti2lk2u...
CVE-2025-27514 GLPI is susceptible to Stored XSS attack through project's kanban
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In versions 9.5.0 through 10.0.18, a technician can use a malicious payload to trigger a stored XSS on the project's kanban. This is fixed in version 10.0.1...
CVE-2025-6504
creationtimestamp| type| source ---|---|--- 2025-07-29 17:06:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv4lr46e6n2z...
nodejs:20 security update
An update is available for module.nodejs-nodemon, nodejs-packaging, module.nodejs-packaging, nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...
grafana-pcp security update
An update is available for grafana-pcp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...
CVE-2025-53079
creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...
CVE-2025-7809
creationtimestamp| type| source ---|---|--- 2025-07-29 07:10:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3khwfz2c2l...
CVE-2025-43209
creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-673/ 2026-04-02 22:18:34+00:00| seen| Telegram/ofzxZdYhE5nMpuM1P1zGrKT9SL3EwVBffeTg8dXaW1MKkb4...