23602 matches found
CVE-2025-38362 drm/amd/display: Add null pointer check for get_first_active_display()
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for getfirstactivedisplay The function modhdcphdcp1enableencryption calls the function getfirstactivedisplay, but does not check its return value. The return value is a null pointer if the...
CVE-2025-8138 TOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflow
A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formOneKeyAccessButton of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...
CVE-2025-54568
Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge node...
CVE-2025-23276
creationtimestamp| type| source ---|---|--- 2025-07-25 03:34:10+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4iqa7jk2g 2025-08-02 20:17:45+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lvgycns3d22j 2025-08-03 02:27:59+00:00| seen|...
CVE-2025-54558
OpenAI Codex CLI before 0.9.0 auto-approves ripgrep aka rg execution even with the --pre or --hostname-bin or --search-zip or -z flag...
CVE-2025-45939
CVE-2025-45939 affects Apwide Golive Jira plugin version 10.2.0. The issue is a Server-Side Request Forgery (SSRF) exposed via the plugin’s test webhook function. No exploitation details are provided beyond this SSRF description; impact is described as limited to low confidentiality, integrity, a...
CVE-2025-29628
A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 leaving the string vulnerable to interception and modification through a...
CVE-2025-29629
Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak default credentials for secure shell access. This may result in attackers gaining access to exposed Gardyn Home Kits...
CVE-2025-51085
creationtimestamp| type| source ---|---|--- 2025-07-24 16:34:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114909175389400814...
CVE-2025-36548
creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:23+00:00| seen| https://infosec.place/objects/cc2a7777-2e45-4874-bf93-dc03dc350ff7...
CVE-2025-8042
creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:38+00:00| seen| Telegram/9o4BfNtIOZ97fNW94XQZtKman2tFufd5bSC8ENSBdHyp2c...
CVE-2025-8027
creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2025-07-25 03:32:52+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4gg2y622g 2025-07-29 13:27:06+00:00| seen|...
CVE-2025-8038
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox ignored paths when checking the validity of navigations in a frame...
CVE-2025-8035
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140, and Thunderbird 140. Some of these bugs showed...
CVE-2025-8028
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On arm64, a WASM brtable instruction with a large number of entries could lead to the label being too far from the instruction, causing truncation and incorrect computation of th...
CVE-2025-3946
creationtimestamp| type| source ---|---|--- 2025-07-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-205-03 2025-07-24 16:04:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lupvxrav4i24 2025-09-04 10:00:00+00:00| seen|...
CVE-2025-7966
The CVE-2025-7966 entry concerns the Get Youtube Subs WordPress plugin. Affected versions are all up to and including 3.5, where stored cross-site scripting is possible via the channel, layout, and subs_count parameters due to insufficient input sanitization and output escaping. Authenticated att...
CVE-2025-44109
creationtimestamp| type| source ---|---|--- 2025-07-24 00:27:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luobljwgbj2h 2026-06-18 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-169-03...
CVE-2025-54365
fastapi-guard is a security library for FastAPI that provides middleware to control IPs, log requests, detect penetration attempts and more. In version 3.0.1, the regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this...