FreeBSD : chromium -- multiple security fixes (9456d4e9-055f-11f0-85f3-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9456d4e9-055f-11f0-85f3-a8a1599412c6 advisory. Chrome Releases reports: This update includes 2 security fixes: Tenable has extracted the preceding...

The vulnerability of the abort() function in the Documentation/virt/kvm/api.rst of the Linux kernel allows a malicious actor to trigger a service failure.

The vulnerability of the abort function in the Documentation/virt/kvm/api.rst of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2025-27888

creationtimestamp| type| source ---|---|--- 2025-03-19 17:38:56+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lkqpzhrmus2b 2025-03-20 12:56:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114194866048910223 2025-03-20 15:43:38+00:00| seen|...

CVE-2024-13410

creationtimestamp| type| source ---|---|--- 2025-03-19 07:34:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkpoa2d4et26 2025-03-19 07:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lkpol2gbfw24 2025-03-19 07:49:36+00:00| seen|...

CVE-2025-27764

creationtimestamp| type| source ---|---|--- 2025-03-18 01:50:51+00:00| seen| https://t.me/cvedetector/20549 2025-03-18 02:01:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkml5qgapk2j...

RLSA-2025:1329 Moderate: doxygen security update

Doxygen can generate an online class browser in HTML and/or a reference manual in LaTeX from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. Security Fixes:...

CVE-2025-1398

creationtimestamp| type| source ---|---|--- 2025-03-17 15:24:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114178461483606694 2025-03-17 15:40:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lklihfzuve2v 2025-03-17 17:28:06+00:00| seen|...

CVE-2025-2378

creationtimestamp| type| source ---|---|--- 2025-03-17 14:57:20+00:00| seen| https://t.me/cvedetector/20457 2025-03-17 15:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklir45uty2w 2025-03-17 16:33:08+00:00| seen| Telegram/tbvVbz5ekkGAeSawYQoMdEeMb-2G-PfhhFRvwFDUo-eDBI...

CVE-2023-52319

creationtimestamp| type| source ---|---|--- 2025-03-17 14:51:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7776 2025-03-17 15:45:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklir3j7q42s...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0

The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0

The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...

The vulnerability of the profapi.dll file, a software component used for creating, testing, documenting, publishing, and maintaining the API of an application’s software interface, allows a perpetrator to execute arbitrary code.

The vulnerability of the profapi.dll file, which is used in software for creating, testing, documenting, publishing, and maintaining the API of an application, is related to the use of an insecure path for searching. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-27174

creationtimestamp| type| source ---|---|--- 2025-03-11 21:49:05+00:00| seen| https://t.me/cvedetector/20135 2025-03-12 04:43:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7277 2025-03-12 13:43:42+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6pmd3g2s2y 2025-03-13...

CVE-2025-27396

creationtimestamp| type| source ---|---|--- 2025-03-11 11:35:11+00:00| seen| Telegram/BUC-FpXySBJlIgXgQmiFYagG3wm0MhpRzVS07GXFjNvPGc 2025-03-11 11:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114143638979930528 2025-03-11 12:35:48+00:00| seen|...

CVE-2024-12009

creationtimestamp| type| source ---|---|--- 2025-03-11 05:05:02+00:00| seen| https://t.me/cvedetector/20028 2025-03-11 05:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk3ey3rdoh2h...

CVE-2025-2137

creationtimestamp| type| source ---|---|--- 2025-03-10 21:51:42+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114140348492064450 2025-03-10 23:13:40+00:00| seen| https://t.me/cvedetector/19985 2025-03-10 23:51:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmob5db...

wapiti

It is an offensive tool for web application security testing. The primary vulnerability class targeted is SQL injection and XSS. The tool is designed to check web applications for vulnerabilities, and it is likely used by security researchers and penetration testers. The tool is written in Python...

CVE-2025-26204

CVE-2025-26204 is rejected/not used per the Initial Description.

CLSA-2025-1741290577 gcc: Fix of CVE-2020-11023

CVE-2020-11023: fix jQuery untrusted code execution vulnerability in the documentation...

CVE-2025-2031

ChestnutCMS up to version 1.5.2 exposes a vulnerability in the file upload endpoint /dev-api/cms/file/upload. The root cause is lack of validation of the uploaded file in the parameter file, enabling an attacker to perform an unrestricted upload and remotely execute arbitrary code. Multiple sourc...