CVE-2025-32697

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki:...

CVE-2025-32700

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/Api/QueryAbuseLog.Php, includes/Pager/AbuseLogPager.Php, includes/Special/SpecialAbuseLog.Php,...

CVE-2025-29088

creationtimestamp| type| source ---|---|--- 2025-04-10 15:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta3q3ve2g 2025-04-10 17:52:10+00:00| seen| https://t.me/cvedetector/22659 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-0...

CVE-2025-32027 Yii does not prevent XSS in scenarios where fallback error renderer is used

Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher...

CVE-2025-0362

Removed by vendor...

CVE-2025-25197

Silverstripe Elemental extends a page type to swap the content area for a list of manageable elements to compose a page out of rather than a single text field. An elemental block can include an XSS payload, which can be executed when viewing the "Content blocks in use" report. The vulnerability i...

CVE-2024-11129

Removed by vendor...

CVE-2025-32259

creationtimestamp| type| source ---|---|--- 2025-04-10 08:48:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11202 2025-04-10 11:10:39+00:00| seen| https://t.me/cvedetector/22630 2025-04-10 11:32:37+00:00| seen|...

CVE-2025-32728

A flaw was found in OpenSSH. In affected versions of sshd, the DisableForwarding directive does not fully adhere to the intended functionality as documented. Specifically, it fails to disable X11 and agent forwarding, which may allow unintended access under certain configurations. Mitigation To...

CVE-2025-32387

Helm is a package manager for Charts for Kubernetes. A JSON Schema file within a chart can be crafted with a deeply nested chain of references, leading to parser recursion that can exceed the stack size limit and trigger a stack overflow. This issue has been resolved in Helm v3.17.3. Mitigation T...

CVE-2025-32728

creationtimestamp| type| source ---|---|--- 2025-04-10 01:48:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11187 2025-04-10 05:19:24+00:00| seen| https://t.me/cvedetector/22612 2025-04-10 14:03:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114314037253879465 2025-04-15...

CVE-2025-21601 Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device

An Improper Following of Specification by Caller vulnerability in web management J-Web, Captive Portal, 802.1X, Juniper Secure Connect JSC of Juniper Networks Junos OS on SRX Series, EX Series, MX240, MX480, MX960, QFX5120 Series, allows an unauthenticated, network-based attacker, sending genuine...

CVE-2025-32485 WordPress WP Performance Pack plugin <= 2.5.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Bjoern WP Performance Pack wp-performance-pack allows Cross Site Request Forgery.This issue affects WP Performance Pack: from n/a through = 2.5.4...

CVE-2025-32497

Summary (CVE-2025-32497) : The Spoiler Block WordPress plugin is affected by a Cross-Site Request Forgery (CSRF) leading to Stored XSS, documented for Spoiler Block versions up to 1.7. The initial description confirms CSRF as the trigger and stored XSS as the consequence, affecting “Spoiler Block...

CVE-2025-32374

CVE-2025-32374 affects DNN Platform (DotNetNuke). The public registration form can trigger a denial-of-service condition in affected installations, caused by processing crafted input. Remediation: upgrade to version 9.13.8 or later (as stated by multiple sources and advisories). In practice, Red ...

CVE-2025-27934

Information disclosure of authentication information in the specific service vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product authentication information...

CVE-2025-25056

CVE-2025-25056 describes a Cross-site request forgery in Inaba Denki Sangyo Wi-Fi AP UNIT AC-WPS-11ac series. The vulnerability allows an authenticated user to perform unintended operations when visiting a malicious page while logged in. The JVN entry aggregates multiple CVEs for this product fam...

BELL-CVE-2025-29087

Bulletin has no description...

CVE-2024-58112

Exception capture failure vulnerability in the SVG parsing module of the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-31672

Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names including the path in the zip. In this cas...