CVE-2025-49514

A vulnerability was found in Moodle. A DNS rebind risk in cURL request handling could lead to a Server-side request forgery SSRF vulnerability, as configurations for blocked hosts and allowed ports might be bypassed...

CVE-2022-50195

In the Linux kernel, the following vulnerability has been resolved: ARM: dts: qcom: replace gcc PXO with pxoboard fixed clock Replace gcc PXO phandle to pxoboard fixed clock declared in the dts. gcc driver doesn't provide PXOSRC as it's a fixed-clock. This cause a kernel panic if any driver...

CVE-2022-50141

In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-esdhc: Fix refcount leak in esdhcsignalvoltageswitch offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount...

CVE-2022-50186

In the Linux kernel, the following vulnerability has been resolved: ath11k: fix missing skb drop on htctxcompletion error On htctxcompletion error the skb is not dropped. This is wrong since the completionhandler logic expect the skb to be consumed anyway even when an error is triggered. Not...

CVE-2022-49966

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing -finimicrocode interface for Sienna Cichlid To avoid any potential memory leak...

CVE-2022-50224

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled mindblowing and trigger the WARN that fires on reserved SPTE bits...

CVE-2022-50152 usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe

In the Linux kernel, the following vulnerability has been resolved: usb: ohci-nxp: Fix refcount leak in ohcihcdnxpprobe ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2025-38025

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7606: check for NULL before calling swmodeconfig Check that the swmodeconfig function pointer is not NULL before calling it. Not all buses define this callback, which resulted in a NULL pointer dereference...

CVE-2025-6086

creationtimestamp| type| source ---|---|--- 2025-06-18 09:39:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18697 2025-06-18 10:30:30+00:00| seen| Telegram/eNhUWwTCmDOcOVtUK7HK-7p3MizJgWZ2cgbRhEheBxZ6PY 2025-06-18 12:17:51+00:00| seen|...

BELL-CVE-2025-49178

Bulletin has no description...

CVE-2025-48976

Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fi...

CVE-2025-49146

pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to required default value is prefer, the driver would incorrectly allow connections to proceed with authentication methods that do not support...

CVE-2025-5478

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-355/ 2025-06-12 05:06:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114668653383825740 2025-06-21 00:45:11+00:00| seen|...

CVE-2025-26521 Apache CloudStack: CKS cluster in project exposes user API keys

When an Apache CloudStack user-account creates a CKS-based Kubernetes cluster in a project, the API key and the secret key of the 'kubeadmin' user of the caller account are used to create the secret config in the CKS-based Kubernetes cluster. A member of the project who can access the CKS-based...

CVE-2025-4801

creationtimestamp| type| source ---|---|--- 2025-06-10 17:19:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbfn36uof2u...

CVE-2025-471668

creationtimestamp| type| source ---|---|--- 2025-06-10 16:45:25+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0189...

CVE-2025-32715

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-17 22:57:05+00:00| seen| https://t.me/breachdetector/789189...

CVE-2025-47168

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 17:32:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17952...

CVE-2025-42983

creationtimestamp| type| source ---|---|--- 2025-06-10 01:33:53+00:00| seen| Telegram/VjI6o5iinQgIrx0kweQ6vZ4ijUEDsimPFeQ2gUe4Yzczac 2025-06-10 03:41:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7xx5nbj62m 2025-06-10 15:31:14+00:00| seen|...

CVE-2025-49140 Pion Interceptor's improper RTP padding handling allows remote crash for SFU users (DoS)

Pion Interceptor is a framework for building RTP/RTCP communication software. Versions v0.1.36 through v0.1.38 contain a bug in a RTP packet factory that can be exploited to trigger a panic with Pion based SFU via crafted RTP packets, This only affect users that use pion/interceptor. Users should...