CVE-2025-2382

creationtimestamp| type| source ---|---|--- 2025-03-17 16:33:06+00:00| published-proof-of-concept| Telegram/k2hWLXjvKh8ojTF1EeSN0Mqc987DrfNzj7Aa-hbf1HoriQ 2025-03-17 17:27:57+00:00| seen| https://t.me/cvedetector/20468 2025-03-17 17:45:49+00:00| seen|...

CVE-2024-13126

The Download Manager WordPress plugin (versions prior to 3.3.07 ) is vulnerable to unauthenticated data exposure because it fails to prevent directory listing on web servers that do not utilize htaccess . This allows an attacker to gain unauthorized access to files stored in the download-manager-...

CVE-2025-21863

In the Linux kernel, the following vulnerability has been resolved: iouring: prevent opcode speculation sqe-opcode is used for different tables, make sure we santitise it against speculations...

CVE-2025-20931

Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code...

CVE-2024-13897

creationtimestamp| type| source ---|---|--- 2025-03-06 08:37:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6656 2025-03-06 09:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77j3v542a 2025-03-06 11:20:05+00:00| seen| https://t.me/cvedetector/19691 2025-03-08...

CVE-2025-20916

creationtimestamp| type| source ---|---|--- 2025-03-06 05:34:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljorixihvt2e 2025-03-06 07:09:33+00:00| seen| https://t.me/cvedetector/19688...

CVE-2025-1933

On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. This vulnerability affects Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8...

CVE-2025-27426 Firefox Mobile iOS Full Address Bar Spoof Using Server-Side Redirect to internal error page

Malicious websites utilizing a server-side redirect to an internal error page could result in a spoofed website URL. This vulnerability was fixed in Firefox for iOS 136...

CVE-2024-53387

A DOM Clobbering vulnerability in umeditor v1.2.3 allows attackers to execute arbitrary code via supplying a crafted HTML element...

CVE-2025-21790

In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlanvnigroupinit return value vxlaninit must check vxlanvnigroupinit success otherwise a crash happens later, spotted by syzbot. Oops: general protection fault, probably for non-canonical address 0xdffffc000000002c:...

CVE-2025-21781

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Reference counting is used to ensure that batadvhardifneighnode and batadvhardiface are not freed before/during batadvvelpthroughputmetricupdate work is finished. But there isn't a...

CVE-2022-49515

In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l41: Fix an out-of-bounds access in otppackedelementt The CS35L41NUMOTPELEM is 100, but only 99 entries are defined in the array otpmap1/2CS35L41NUMOTPELEM, this will trigger UBSAN to report a shift-out-of-bounds warnin...

CVE-2024-50689

SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the orgService API model...

CVE-2022-49406

In the Linux kernel, the following vulnerability has been resolved: block: Fix potential deadlock in blkiarangesysfsshow When being read, a sysfs attribute is already protected against removal with the kobject node active reference counter. As a result, in blkiarangesysfsshow, there is no need to...

CVE-2022-49057

In the Linux kernel, the following vulnerability has been resolved: block: nullblk: end timed out poll request When poll request is timed out, it is removed from the poll list, but not completed, so the request is leaked, and never get chance to complete. Fix the issue by ending it in timeout...

CVE-2022-49139

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: fix null ptr deref on hcisyncconncompleteevt This event is just specified for SCO and eSCO link types. On the reception of a HCISynchronousConnectionComplete for a BDADDR of an existing LE connection, LE link type and ...

CVE-2022-49396

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp: fix reset-controller leak on probe errors Make sure to release the lane reset controller in case of a late probe error e.g. probe deferral. Note that due to the reset controller being defined in devicetree in "lane...

CVE-2022-49051

CVE-2022-49051 concerns the Linux kernel USB driver net: usb: aqc111, specifically the aqc111_rx_fixup() function. The advisory states multiple out-of-bounds accesses that a malicious or defective USB device can trigger, including OOB reads in the metadata array (desc_offset..desc_offset+2*pkt_co...

CVE-2025-26532

CVE-2025-26532 relates to Moodle: “Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.” Multiple sources (GHSA, OSV, CIRCL, Nessus) describe a vulnerability where teachers can evade or bypass trusttext configuration when restoring glos...

CVE-2025-1367

creationtimestamp| type| source ---|---|--- 2025-02-17 00:49:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114016476693480471 2025-02-17 01:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidl3fvqnh2g 2025-02-17 03:38:40+00:00| seen|...