6722 matches found
CVE-2025-25054
Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user...
BELL-CVE-2025-26465
Bulletin has no description...
BELL-CVE-2025-0622
Bulletin has no description...
CVE-2025-1447
creationtimestamp| type| source ---|---|--- 2025-02-19 03:09:26+00:00| seen| Telegram/eVW0SDeapKbyz3DaIi28cB3jh41KTy7RDpdKBCqZ8gmHSfgB 2025-02-19 03:41:39+00:00| seen| https://t.me/cvedetector/18397 2025-02-19 04:01:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3liivcbgabk2m...
CVE-2020-35546
Lexmark CVE-2020-35546 affects MX6500/MX6500e printers. A race condition exists while processing the state of the two security jumpers during boot, causing misreads of the security jumper state and the device to incorrectly believe the state has changed. The result is that security access control...
CVE-2025-25471
FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c...
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047...
CVE-2025-25473
FFmpeg git master before commit c08d30 was discovered to contain a memory leak in the avformatfreecontext function in libavutil/mem.c...
CVE-2024-56171
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a use-after-free in xmlSchemaIDCFillNodeTables and xmlSchemaBubbleIDCNodeTables in xmlschemas.c. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be...
CVE-2025-26615
creationtimestamp| type| source ---|---|--- 2025-02-18 21:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lii6nxtd6o2o 2025-02-18 22:34:38+00:00| published-proof-of-concept| Telegram/4XaNwPTMFyO1Vz7bqzn38wD37G0y60931j9yFHwcc2fnqpY 2025-02-18 22:45:47+00:00| seen|...
CVE-2025-0622 Grub2: command/gpg: use-after-free due to hooks not being removed on module unload
A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an attacker to force grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If...
CVE-2024-45776
When reading the language .mo file in grubmofileopen, grub2 fails to verify an integer overflow when allocating its internal buffer. A crafted .mo file may lead the buffer size calculation to overflow, leading to out-of-bound reads and writes. This flaw allows an attacker to leak sensitive data o...
CVE-2025-26603
Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...
CVE-2024-13687
creationtimestamp| type| source ---|---|--- 2025-02-18 05:16:59+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligj22rkm42t 2025-02-18 07:56:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4739 2025-02-18 09:16:56+00:00| seen|...
CVE-2024-13501
creationtimestamp| type| source ---|---|--- 2025-02-18 05:15:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ligixkumha2o 2025-02-18 11:39:00+00:00| seen| Telegram/c9dfVfFXnLiugId5JxKOwb7ZbNT33a6aiRFqYF542sKRhN3N...
CVE-2025-21702
In the Linux kernel, the following vulnerability has been resolved: pfifotailenqueue: Drop new packet when sch-limit == 0 Expected behaviour: In case we reach scheduler's limit, pfifotailenqueue will drop a packet in scheduler's queue and decrease scheduler's qlen by one. Then, pfifotailenqueue...
CVE-2025-24928
libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047...
CVE-2025-1365
A flaw was found in GNU elfutils. This vulnerability allows a buffer overflow via manipulation of the argument D/a in the processsymtab function of readelf.c. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2025-1392 D-Link DIR-816 index.html cross site scripting
A vulnerability has been found in D-Link DIR-816 1.01TO and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24Gbasic. The manipulation of the argument SSID leads to cross site...
CVE-2025-1371 GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference
A vulnerability has been found in GNU elfutils 0.192 and classified as problematic. This vulnerability affects the function handledynamicsymtab of the file readelf.c of the component eu-read. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has...