CVE-2025-45752

creationtimestamp| type| source ---|---|--- 2025-05-21 21:47:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpplbf2og42l...

CVE-2009-5056

Open Ticket Request System OTRS before 2.4.0-beta2 does not properly enforce the moveinto permission setting for a queue, which allows remote authenticated users to bypass intended access restrictions and read a ticket by watching this ticket, and then selecting the ticket from the watched-ticket...

CVE-2009-1775

Multiple cross-site scripting XSS vulnerabilities in Ulteo Open Virtual Desktop 1.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 admin/applications.php, 2 admin/appsgroup.php, 3 admin/users.php, 4 admin/usersgroup.php, and 5 admin/tasks.php; 6 show...

CVE-2009-3538

Directory traversal vulnerability in thumb.php in Clear Content 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2025-48202

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4aognhn2w 2025-05-21 20:41:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17199...

CVE-2025-48203

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4ao4hry2t 2025-05-21 20:41:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17202...

CVE-2025-20242

creationtimestamp| type| source ---|---|--- 2025-05-21 16:41:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17137 2025-05-21 18:39:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114547277430416464...

CVE-2025-1418

CVE-2025-1418 affects the Proget MDM server (Konsola Proget). A low-privileged user could read information about profiles (which describe allowed/prohibited functions). The issue does not expose sensitive data about devices in the initial description, but it leaks profile metadata. The entry is f...

Security Bulletin: WebSphere Service Registry and Repository (WSSR) is affected by IBM SDK, Java Technology Edition Quarterly CPU - Apr 2025 - Includes Oracle April 2024 CPU plus CVE-2025-4447

Summary WebSphere Application Server is shipped as a component of WebSphere Service Registry and Repository, and it uses the IBM® Java SDK. Information about the IBM® Java SDK April 2025 CPU is available in a Security Bulletin. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2025-37980

No description is available for this CVE...

CVE-2025-37927

No description is available for this CVE...

CVE-2025-37951

No description is available for this CVE...

CVE-2025-37960

No description is available for this CVE...

CVE-2025-37990

No description is available for this CVE...

CVE-2025-37973

No description is available for this CVE...

CVE-2025-37921

No description is available for this CVE...

CVE-2025-30310

creationtimestamp| type| source ---|---|--- 2025-05-21 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-308/...

CVE-2025-37929

No description is available for this CVE...

CVE-2025-37928

No description is available for this CVE...

CVE-2024-55063

Multiple Code Injection vulnerabilities in EasyVirt DC NetScope = 8.7.0 allows remote authenticated attackers to execute arbitrary code via the 1 lang parameter to /international/keyboard/options; the 2 keyboardlayout or 3 keyboardvariant parameter to /international/settings/keyboard; the 4...