2442 matches found
CVE-2025-7371
Okta On-Premises Provisioning OPP agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You...
Exploit for CVE-2025-34085
📌 CVE-2025-34085 — Simple File List WordPress Plugin RCE 📌...
CVE-2025-7281
CVE-2025-7281 corresponds to IrfanView CADImage Plugin DWG parsing memory corruption leading to remote code execution. The flaw is in DWG file parsing due to insufficient input validation, allowing an attacker to execute code in the process context. This requires user interaction (visiting a mali...
Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server
Summary Vulnerabilities exist in IBM Netezza Performance Server are addressed in 11.2.3.3-IF1 Vulnerability Details CVEID:CVE-2024-6763 DESCRIPTION: Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . It includes a utility class, HttpURI, for URI/URL parsin...
CVE-2025-43720
Headwind MDM before 5.33.1 makes configuration details accessible to unauthorized users. The Configuration profile is exposed to the Observer user role, revealing the password requires to escape out of the MDM controlled device's profile...
Exploit for CVE-2025-34085
CVE-2025-34085 — WordPress Simple File List Unauthenticated RC...
CVE-2025-7838
creationtimestamp| type| source ---|---|--- 2025-07-19 20:55:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ludtvnqh352i...
CVE-2025-7669
creationtimestamp| type| source ---|---|--- 2025-07-19 06:40:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luce5aenvm2j...
CVE-2025-6717
creationtimestamp| type| source ---|---|--- 2025-07-18 09:05:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lua3qwinas2t...
CVE-2025-53817
7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...
CVE-2025-7472
creationtimestamp| type| source ---|---|--- 2025-07-17 19:03:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114870125851359984 2025-07-18 05:43:48+00:00| seen| https://poliverso.org/objects/0477a01e-b4ff51d2-3ebe177d5dcd7fd6...
PT-2025-30119 · Undefined · Undefined
CVE-2024-12498 - CVE-2021-42251: Apache Struts Deserialization Remote Code Execution CVE ID : CVE-2024-12498 Published : July 16, 2025, 11:15 p.m. | 1 hour, 51 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA...
CVE-2025-54009
CVE-2025-54009 corresponds to a stored XSS vulnerability in Crocoblock JetSmartFilters (affected versions up to and including 3.6.8). The underlying issue is improper neutralization of input during web page generation, enabling attackers to inject malicious scripts. Public references in the conne...
CVE-2025-50102
A denial of service flaw was found in MySQL. This flaw allows a privileged attacker with network access via multiple protocols to cause a crash in the MySQL server...
CVE-2025-32988
A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name SAN entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1deletestructure on an ASN.1 node it do...
CVE-2025-6742
creationtimestamp| type| source ---|---|--- 2025-07-09 09:24:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltjindain52i...
Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation
Vulnerability Details Affected Vendor: Schneider Electric Affected Product: EcoStruxure IT Data Center Expert Affected Version: 8.3 and prior Platform: CentOS CWE Classification: CWE-266: Incorrect Privilege Assignment CVE ID: CVE-2025-50124 2. Vulnerability Description The Data Center Expert...
Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery
Vulnerability Details Affected Vendor: Schneider Electric Affected Product: EcoStruxure IT Data Center Expert Affected Version: 8.3 and prior Platform: CentOS CWE Classification: CWE-918: Server-Side Request Forgery SSRF CVE ID: CVE-2025-50125 2. Vulnerability Description The Data Center Expert...
CVE-2025-497007
creationtimestamp| type| source ---|---|--- 2025-07-08 16:24:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215 2025-07-19 09:40:27+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0215...