2444 matches found
CVE-2025-32111
creationtimestamp| type| source ---|---|--- 2025-04-04 07:36:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10415 2025-04-04 08:02:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llxxalmcos2w 2025-04-04 09:48:28+00:00| seen|...
CVE-2025-3196
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads ...
BELL-CVE-2025-21950
Bulletin has no description...
CVE-2025-22929
OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the filterid parameter at /students/StudentFilters.php...
Debian dsa-5892 : atop - security update
The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5892 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5892-1 [email protected] https://www.debian.org/security/ Moritz...
Security Bulletin: IBM DataPower Gateway vulnerable to denial of service due to rustls
Summary Rustls is used in gateway peering Vulnerability Details CVEID:CVE-2024-11738 DESCRIPTION: A flaw was found in Rustls 0.23.13 and related APIs. This vulnerability allows denial of service panic via a fragmented TLS ClientHello message. CWE:CWE-248: Uncaught Exception CVSS Source:...
CVE-2025-21994
CVE-2025-21994 in the Linux kernel ksmbd component fixes an incorrect validation of the num_aces field in smb_acl. The code previously validated num_aces against ULONG_MAX / sizeof(struct smb_ace *), allowing potential allocation of an array of size ULONG_MAX. The correct check uses the actual nu...
CVE-2025-31571
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Cynob IT Consultancy The Logo Slider the-logo-slider allows Reflected XSS.This issue affects The Logo Slider: from n/a through = 1.0.0...
CVE-2025-31741 WordPress Easy Magazine plugin <= 2.1.13 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Filtr8 Easy Magazine allows DOM-Based XSS. This issue affects Easy Magazine: from n/a through 2.1.13...
PT-2025-14812 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a rejected or withdrawn CVE ID due to erroneous association with an open source vulnerability by another vendor. No information is available about the estimated number of...
[SECURITY] [DLA 4104-1] freetype security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4104-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 01, 2025 https://wiki.debian.org/LTS -...
[SECURITY] [DLA 4099-1] flatpak security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4099-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk March 31, 2025 https://wiki.debian.org/LTS -...
CVE-2025-2982 Legrand SMS PowerView file inclusion
A vulnerability, which was classified as critical, was found in Legrand SMS PowerView 1.x. Affected is an unknown function. The manipulation of the argument redirect leads to file inclusion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used...
Debian dla-4099 : flatpak - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4099 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4099-1 [email protected] https://www.debian.org/lts/security/...
Exploit for CVE-2025-29927
CVE-2025-29927 - Next.js Middleware Authorization Bypass PoC...
[SECURITY] [DLA 4094-1] mercurial security update
Debian LTS Advisory DLA-4094-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson March 27, 2025 https://wiki.debian.org/LTS Package : mercurial Version : 5.6.1-4+deb11u1 CVE ID : CVE-2025-2361 Debian Bug : 1100899 A cross-site scripting vulnerability was discover...
CVE-2024-12905
An Improper Link Resolution Before File Access "Link Following" and Improper Limitation of a Pathname to a Restricted Directory "Path Traversal". This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intend...
CVE-2023-53027
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...