CVE-2025-7848 Missing input check in lvpict.cpp used in NI LabVIEW

A memory corruption vulnerability due to improper input validation in lvpict.cpp exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q1 and prior...

CVE-2025-36010

IBM Db2 for Linux 12.1.0, 12.1.1, and 12.1.2 could allow an unauthenticated user to cause a denial of service due to executable segments that are waiting for each other to release a necessary lock...

CVE-2025-5922

TSplus Remote Access Admin Tool stores the PIN hash in the system registry for versions below 18.40.6.17, and the hash is not salted, enabling potential brute-force attacks using rainbow tables. Patches are provided in v18.40.6.17 and in LTS lines: v17.2025.6.27 and v16.2025.6.27. Affected compon...

CVE-2025-7656 affecting package nodejs18 for versions less than 18.20.3-8

CVE-2025-7656 affecting package nodejs18 for versions less than 18.20.3-8. A patched version of the package is available...

CVE-2025-5587

creationtimestamp| type| source ---|---|--- 2025-07-29 13:29:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv47nl3blu2w...

CVE-2025-7458 SQLite integer overflow in key info allocation may lead to information disclosure.

An integer overflow in the sqlite3KeyInfoFromExprList function in SQLite versions 3.39.2 through 3.41.1 allows an attacker with the ability to execute arbitrary SQL statements to cause a denial of service or disclose sensitive information from process memory via a crafted SELECT statement with a...

CVE-2025-40682

creationtimestamp| type| source ---|---|--- 2025-07-29 12:41:18+00:00| seen| https://bsky.app/profile/potato.software/post/3lv44wrajiz2c...

CVE-2025-53080

creationtimestamp| type| source ---|---|--- 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

CVE-2025-53081

creationtimestamp| type| source ---|---|--- 2025-07-29 09:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3srwdb2n2h 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

BELL-CVE-2025-38476

Bulletin has no description...

CVE-2025-4566

CVE-2025-4566 : Elementor Website Builder for WordPress is vulnerable to Stored XSS via the data-text attribute in the Text Path widget (Text Path). Affected: all versions up to 3.30.2. Exploitation requires authenticated access at Contributor level or higher; impact is script execution when a us...

CVE-2025-43239

creationtimestamp| type| source ---|---|--- 2025-07-29 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-678/...

CVE-2025-54766

creationtimestamp| type| source ---|---|--- 2025-07-29 01:10:33+00:00| seen| https://bsky.app/profile/jimbecher.bsky.social/post/3lv2wdmsm4s2k...

PT-2025-31176 · Citrix · Citrix Netscaler

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler affected versions not specified Description: The vulnerability is a denial of service issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-28170

Grandstream Networks GXP1628 =1.0.4.130 is vulnerable to Incorrect Access Control. The device is configured with directory listing enabled, allowing unauthorized access to sensitive directories and files...

CVE-2025-54767

The CVE-2025-54767 issue affects Xorux LPAR2RRD: versions 8.04 and prior are vulnerable to a denial-of-service described as an authenticated, read-only user being able to terminate processes on the Xormon Original virtual appliance as the lpar2rrd user. Underlying cause involves an endpoint (repo...

CVE-2025-54419

creationtimestamp| type| source ---|---|--- 2025-07-28 22:57:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ouzjcra2j 2025-07-31 20:47:46+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvbz2hwopk2c...

CVE-2025-54298

creationtimestamp| type| source ---|---|--- 2025-07-28 19:58:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv2ewg5f6l2j...

CVE-2025-8283 Netavark: podman: netavark may resolve hostnames to unexpected hosts

A vulnerability was found in the netavark package, a network stack for containers used with Podman. Due to dns.podman search domain being removed, netavark may return external servers if a valid A/AAAA record is sent as a response. When creating a container with a given name, this name will be us...

CVE-2025-38483

In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: / only irqs 2, 3, 4, 5, 6, 7, 10, 11, 12, 14, and 15 are valid / if 1 options1 & 0xdcfc However, it-optionsi is an...