1052 matches found
CVE-2025-48888
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 1.41.3 and prior to versions 2.1.13, 2.2.13, and 2.3.2, deno run --allow-read --deny-read main.ts results in allowed, even though 'deny' should be stronger. The result is the same with all global unary permissions give...
CVE-2025-41646
CVE-2025-41646 affects RevPi Webstatus (≤ v2.4.5). The authentication bypass is caused by an incorrect type conversion in the login mechanism, allowing an unauthenticated remote attacker to gain full device access. Connected documents identify RevPi Webstatus as vulnerable to improper type handli...
CVE-2025-5737
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...
CVE-2025-5694
creationtimestamp| type| source ---|---|--- 2025-06-06 00:57:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvmv5koor2e...
CVE-2025-46257
creationtimestamp| type| source ---|---|--- 2025-06-05 19:14:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquzpkyxqg2s...
CVE-2025-23098
creationtimestamp| type| source ---|---|--- 2025-06-03 21:20:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7swhphv25...
CVE-2025-21485
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC...
libsoup-2_4-1-2.74.3-11.1 on GA media (moderate)
libsoup-24-1-2.74.3-11.1 on GA media Announcement ID: openSUSE-SU-2025:15189-1 Rating: moderate Cross-References: CVE-2025-32906 CVE-2025-32909 CVE-2025-32910 CVE-2025-32912 CVE-2025-32913 CVE-2025-4948 CVE-2025-4969 CVSS scores: CVE-2025-32906 SUSE : 8.2...
CVE-2025-37998
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in outputuserspace This patch replaces the manual Netlink attribute iteration in outputuserspace with nlaforeachnested, which ensures that only well-formed attributes are processed...
CVE-2025-33043 SMM buffer Integrity
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity...
CVE-2025-5270
No description is available for this CVE...
CVE-2025-41652
creationtimestamp| type| source ---|---|--- 2025-05-27 08:48:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17613 2025-05-27 09:07:03+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lq5dessbva62 2025-05-27 09:18:04+00:00| seen|...
CVE-2025-5203
A flaw was found in the Open Asset Import Library Assimp. This vulnerability allows an out-of-bounds read via local access...
CVE-2025-5201
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be...
CVE-2022-31812
creationtimestamp| type| source ---|---|--- 2025-05-23 17:23:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu5h6z6e22q 2025-05-23 17:47:48+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17447 2025-05-29 10:00:00+00:00| seen|...
CVE-2025-3580
creationtimestamp| type| source ---|---|--- 2025-05-23 14:46:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17393 2025-05-24 13:09:30+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lpw7qgrc6727 2025-05-24 14:34:27+00:00| seen|...
CVE-2024-47605
silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using the "insert media" functionality, the linked oEmbed JSON includes an HTML attribute which will replace the embed shortcode. The HTML is not sanitized before replacing the shortcode, allowing a script payloa...
CVE-2024-8934
A local user with administrative access rights can enter specialy crafted values for settings at the user interface UI of the TwinCAT Package Manager which then causes arbitrary OS commands to be executed...
CVE-2023-42664
A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTT...