CVE-2025-47816

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxmlparseattributes out-of-bounds read, related to extra content at the end of a document...

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

CVE-2025-4432 vulnerabilities

Vulnerabilities for packages: nushell, deno, wasmtime, sqlx, wasm-pack, rustls-ffi, linkerd2-proxy, linkerd-extension-init, parseable, sdp-k8s-injector, ntpd-rs, zed, kdash, wadm, atuin, wasmcloud, oranda, rustup, tealdeer, zizmor, rye, lychee, shadowsocks-rust, xh, buck2, cargo-audit, pixi, zola...

CVE-2025-47762

creationtimestamp| type| source ---|---|--- 2025-05-10 06:31:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loscyi5swz2n...

BELL-CVE-2025-37880

Bulletin has no description...

BELL-CVE-2025-37836

Bulletin has no description...

CVE-2025-3839

creationtimestamp| type| source ---|---|--- 2025-05-10 04:47:13+00:00| seen| https://bsky.app/profile/nyamongo.bsky.social/post/3los55ewsck2u 2026-01-23 05:25:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md2xls32e42h 2026-01-23 07:44:19+00:00| seen|...

CVE-2025-41433

When a Session Initiation Protocol SIP message routing framework MRF application layer gateway ALG profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of...

CVE-2025-20189

A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 RSP3C could allow an unauthenticated, adjacent attacker to trigger a denial of service DoS condition. This vulnerability is due to...

CVE-2025-4432 Ring: some aes functions may panic when overflow checking is enabled in ring

A flaw was found in Rust's Ring package. A panic may be triggered when overflow checking is enabled. In the QUIC protocol, this flaw allows an attacker to induce this panic by sending a specially crafted packet. It will likely occur unintentionally in 1 out of every 232 packets sent or received...

CVE-2025-47625

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in apasionados DoFollow Case by Case dofollow-case-by-case allows Stored XSS.This issue affects DoFollow Case by Case: from n/a through = 3.5.1...

CVE-2025-47602

Missing Authorization vulnerability in ammarahmad786 Calculate Prices based on Distance For WooCommerce calculate-prices-based-on-distance-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Calculate Prices based on Distance For WooCommerce:...

CVE-2025-47494

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Ashan Perera EventON eventon-lite allows PHP Local File Inclusion.This issue affects EventON: from n/a through = 2.4.1...

CVE-2025-47517

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Accept Donations with PayPal & Stripe easy-paypal-donation allows Stored XSS.This issue affects Accept Donations with PayPal & Stripe: from n/a through = 1.4.5...

CVE-2025-20949

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary file with the privilege of Samsung Members...

CVE-2025-37857

In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix array overflow in stsetup Change the array size to follow parms size instead of a fixed value...

CVE-2025-37871

In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sccount directly if fail to queue dlrecall A deadlock warning occurred when invoking nfs4putstid following a failed dlrecall queue operation: T1 T2 nfs4laundromat nfs4getclientreaplist nfs4anylockblockers breakleas...

CVE-2025-0666

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7...

CVE-2025-37877

In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommudeviceregister encounters an error, it can end up tearing down already-configured groups and default domains, however this currently still leaves devices hooked up to iommu-dma and ev...

CVE-2025-37853

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hanghws skip GPU with MES debugfs hanghws is used by GPU reset test with HWS, for MES this crash the kernel with NULL pointer access because dqm-packetmgr is not setup for MES path. Skip GPU with MES for now,...