Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to improper handling of specific path conditions in the authentication process, where the path does not contain / and contains .. An attacker can gain unauthorized access and...

CVE-2016-3115

creationtimestamp| type| source ---|---|--- 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/2961 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/10574...

CVE-2025-30926

creationtimestamp| type| source ---|---|--- 2025-04-01 06:32:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9852 2025-04-01 09:26:43+00:00| seen| https://t.me/cvedetector/21724...

CVE-2025-30369

creationtimestamp| type| source ---|---|--- 2025-03-31 17:31:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9719 2025-03-31 21:43:21+00:00| seen| https://t.me/cvedetector/21639...

Important: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2025-2982

creationtimestamp| type| source ---|---|--- 2025-03-31 08:30:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9618 2025-03-31 10:49:38+00:00| seen| https://t.me/cvedetector/21563...

Important: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Important: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: freetype security update

An update for freetype is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2025-31369

creationtimestamp| type| source ---|---|--- 2025-03-29 04:28:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9528 2025-03-29 06:18:05+00:00| seen| https://t.me/cvedetector/21495...

CVE-2025-2909

creationtimestamp| type| source ---|---|--- 2025-03-28 13:28:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9346 2025-03-28 16:04:34+00:00| seen| https://t.me/cvedetector/21414 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:59+00:00| seen|...

CVE-2025-2911

creationtimestamp| type| source ---|---|--- 2025-03-28 13:28:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9344 2025-03-28 16:04:35+00:00| seen| https://t.me/cvedetector/21415 2025-08-10 18:27:44+00:00| seen| MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c 2025-09-10 07:47:59+00:00| seen|...

CVE-2025-2858

creationtimestamp| type| source ---|---|--- 2025-03-28 13:27:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9343...

CVE-2023-52995

In the Linux kernel, the following vulnerability has been resolved: riscv/kprobe: Fix instruction simulation of JALR Set kprobe at 'jalr 1140ra' of vfswrite results in the following crash: 32.092235 Unable to handle kernel access to user memory without uaccess routines at virtual address...

Ubuntu: Security Advisory (USN-7380-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-4765

creationtimestamp| type| source ---|---|--- 2025-03-27 19:26:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9178...

CVE-2025-29489

creationtimestamp| type| source ---|---|--- 2025-03-27 16:39:17+00:00| seen| https://t.me/cvedetector/21306...

Arbitrary Code Injection

Overview org.apache.kylin:kylin-core-common is a package part of Apache Kylin. Affected versions of this package are vulnerable to Arbitrary Code Injection via the alteration of the JDBC connection configuration. An attacker can execute arbitrary code by modifying the JDBC settings if they gain...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the alteration of the JDBC connection configuration. An attacker can execute arbitrary code by modifying the JDBC settings if they gain system or project admin permissions. Remediation Upgrade...

Server-side Request Forgery (SSRF)

Overview org.apache.kylin:kylin-core-common is a package part of Apache Kylin. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the /kylin/api/xxx/diag endpoint. An attacker can forge requests to internal services by invoking this specific API endpoint ...