CVE-2025-13084

creationtimestamp| type| source ---|---|--- 2025-11-25 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04 2025-11-26 21:08:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6kr7cngi32x...

Linux Distros Unpatched Vulnerability : CVE-2025-11702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in EE affecting all versions from 17.1 before 18.3.5, 18.4 before 18.4.3, and 18.5 before 18.5.1 that could have allowed an...

EUVD-2025-198592

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2025-198559

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-65109 Minder does not sandbox http.send in Rego programs

Minder is an open source software supply chain security platform. In Minder Helm version 0.20241106.3386+ref.2507dbf and Minder Go versions from 0.0.72 to 0.0.83, Minder users may fetch content in the context of the Minder server, which may include URLs which the user would not normally have acce...

CVE-2025-13499

creationtimestamp| type| source ---|---|--- 2025-11-21 07:41:20+00:00| seen| https://gist.github.com/Darkcrai86/e6e153f125584e98e01ccf6a2b27bf92...

Security update for openexr (moderate)

openSUSE security update: security update for openexr ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20056-1 Rating: moderate References: bsc1253233 Cross-References: CVE-2025-64181 CVSS scores: CVE-2025-64181 SUSE : 4...

CVE-2025-13423

creationtimestamp| type| source ---|---|--- 2025-11-20 00:21:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ziqtyps32n...

CVE-2025-65030 Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the comment deletion API allows any authenticated user to delete comments belonging to other users, including poll owners and administrators. The endpoint relies solely on the comment ID f...

CVE-2025-11446

Insertion of Sensitive Information into Log File vulnerability in upKeeper Solutions upKeeper Manager allows Use of Known Domain Credentials.This issue affects upKeeper Manager: from 5.2.0 before 5.2.12...

CVE-2025-65939

creationtimestamp| type| source ---|---|--- 2025-11-19 05:46:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5xkhh5ryk2b...

CVE-2025-63225

creationtimestamp| type| source ---|---|--- 2025-11-18 19:23:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115572331588232554 2025-11-18 21:33:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5wowbxbwr26...

CVE-2025-13346

creationtimestamp| type| source ---|---|--- 2025-11-18 13:31:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vtx3te6s2s...

CVE-2025-12775

creationtimestamp| type| source ---|---|--- 2025-11-18 09:26:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vgbufp4u26 2025-11-18 10:33:16+00:00| seen| https://gist.github.com/Darkcrai86/e3d7df0bfa207a10d00cfba5dcaac83e...

CVE-2025-64292

creationtimestamp| type| source ---|---|--- 2025-11-13 10:19:38+00:00| seen| https://gist.github.com/Darkcrai86/3f2e71dd0871da43af5244fe91af3988 2025-11-13 11:30:30+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5j2tx6a3p22 2025-11-13 13:37:06+00:00| seen|...

CVE-2025-62210 Dynamics 365 Field Service (online) Spoofing Vulnerability

...

CVE-2025-27710

The CVE-2025-27710 entry concerns Intel QAT Windows software prior to version 2.6.0, where an untrusted pointer dereference in Ring 3 user applications can lead to information disclosure. The issue originates from a local access scenario with user authentication and low attack complexity, and no ...

CVE-2025-11578

creationtimestamp| type| source ---|---|--- 2025-11-11 01:31:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5cyg7zxlve2...

CVE-2025-12922

creationtimestamp| type| source ---|---|--- 2025-11-10 02:16:01+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5akhtlglfx2 2025-11-10 03:41:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5apc5rc2l2u...

CVE-2025-7700

CVE-2025-7700 is a vulnerability in FFmpeg’s ALS audio decoder (libavcodec/alsdec.c): a failure to properly check memory allocation can cause a crash when processing certain malformed audio files. This is described across multiple advisories (Debian DLA-4440, Ubuntu USN-7871-1, Mageia and SUSE ad...