28460 matches found
CVE-2025-63024 WordPress Order Delivery Date for WooCommerce plugin <= 4.3.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in tychesoftwares Order Delivery Date for WooCommerce order-delivery-date-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Delivery Date for WooCommerce: from n/a through = 4.3.1...
CVE-2025-63024
CVE-2025-63024 affects WordPress plugin Order Delivery Date for WooCommerce (tychesoftwares) up to version 4.3.1. The issue is Missing Authorization / Broken Access Control due to incorrectly configured access levels, enabling unauthorized actions. Wordfence and Patch Stack indicate the vulnerabi...
RUSTSEC-2025-0152 `finch_cli_rust` was removed from crates.io for malicious code
This attempts to typosquat the existing crate finchcli to steal credentials from local files. The malicious crate had 1 version published on 2025-12-08 and had been downloaded 18 times. There were no crates depending on this crate on crates.io. Thanks to Matthias Zepper of NGI Sweden for reportin...
CVE-2025-64696
creationtimestamp| type| source ---|---|--- 2025-12-09 11:33:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kh6ssvi526...
CVE-2025-14311
creationtimestamp| type| source ---|---|--- 2025-12-09 11:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7kg5xzmh22k...
CVE-2025-40831
SINEC Security Monitor prior to V4.10.0 is affected by an input validation flaw in the date parameter of the report generation function. This could allow an authenticated, low-priv attacker to cause a denial-of-service condition in the report feature. Mitigation: upgrade to V4.10.0 or later (per ...
CVE-2025-40831
A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...
CVE-2025-40831
A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application lacks input validation of date parameter in report generation functionality. This could allow an authenticated, lowly privileged attacker to cause denial of service condition of the report...
CVE-2025-40330
creationtimestamp| type| source ---|---|--- 2025-12-09 09:26:40+00:00| seen| https://gist.github.com/Darkcrai86/9c97d137591334d0eb739dfc63273715...
CVE-2025-40341
creationtimestamp| type| source ---|---|--- 2025-12-09 09:25:31+00:00| seen| https://gist.github.com/Darkcrai86/33b9d5509352f6144416209e22840868 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
CVE-2023-53854
creationtimestamp| type| source ---|---|--- 2025-12-09 08:15:03+00:00| seen| https://gist.github.com/Darkcrai86/fd540a8c0606a3c3d9fa0bf15c5d7baa...
CVE-2023-53861
creationtimestamp| type| source ---|---|--- 2025-12-09 08:13:32+00:00| seen| https://gist.github.com/Darkcrai86/4eeb4e4b5faf4ac115bb42ee0438d476...
CVE-2025-40331
creationtimestamp| type| source ---|---|--- 2025-12-09 08:05:59+00:00| seen| https://gist.github.com/Darkcrai86/61416bd20279e91f7143633ca512c749 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...
October 14, 2025âKB5066586 (OS Build 17763.7919)
None None...
October 14, 2025âKB5066791 (OS Builds 19044.6456 and 19045.6456)
None None...
CVE-2025-41692
creationtimestamp| type| source ---|---|--- 2025-12-09 07:58:10+00:00| seen| https://infosec.exchange/users/certvde/statuses/115688544042508118 2025-12-09 07:58:54+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3m7k35bxdqsp2 2025-12-09 11:19:15+00:00| seen|...
CVE-2025-42880
creationtimestamp| type| source ---|---|--- 2025-12-09 03:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7jlcydjvn2s 2025-12-09 06:04:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m7jursglj72p 2025-12-09 06:04:34+00:00| seen|...
CVE-2022-50654
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix panic due to wrong pageattr of im-image In the scenario where livepatch and kretfunc coexist, the pageattr of im-image is rox after archpreparebpftrampoline in bpftrampolineupdate, and then modifyfentry or registerfentry...
CVE-2023-53783
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fix divide by 0 error in calclcoefs echo max of u64 to cost.model can cause divide by 0 error. echo 8:0 rbps=18446744073709551615 /sys/fs/cgroup/io.cost.model divide error: 0000 1 PREEMPT SMP RIP:...
CVE-2023-53802
In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: htchst: free skb in ath9khtcrxmsg if there is no callback function It is stated that ath9khtcrxmsg either frees the provided skb or passes its management to another callback function. However, the skb is not freed in...