CVE-2025-49255

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through = 1.0.7...

CVE-2022-50099

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: arkfb: Check the size of screen before memsetio In the function arkfbsetpar, the value of 'screensize' is calculated by the user input. If the user provides the improper value, the value of 'screensize' may larger...

CVE-2025-49014

jq is a command-line JSON processor. In version 1.8.0 a heap use after free vulnerability exists within the function fstrflocaltime of /src/builtin.c. This issue has been patched in commit 499c91b, no known fix version exists at time of publication...

CVE-2025-6268 Luna Imaging search cross site scripting

A vulnerability classified as problematic has been found in Luna Imaging up to 7.5.5.6. Affected is an unknown function of the file /luna/servlet/view/search. The manipulation of the argument q leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

CVE-2022-50149

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential deadlock in driverattach In driverattach function, There are also AA deadlock problem, like the commit b232b02bf3c2 "driver core: fix deadlock in deviceattach". stack like commit b232b02bf3c2 "driver...

CVE-2022-50012

In the Linux kernel, the following vulnerability has been resolved: powerpc/64: Init jump labels before parseearlyparam On 64-bit, calling jumplabelinit in setupfeaturekeys is too late because static keys may be used in subroutines of parseearlyparam which is again subroutine of earlyinitdevtree...

CVE-2025-3880

The Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin for WordPress is vulnerable to unauthorized modification of data due to a misconfigured capability check on several functions in all versions up to, and including, 19.9.0. This makes it possible for authenticated attackers, with...

CVE-2025-49518

A vulnerability has been identified in Moodle, the open-source learning management system. The flaw lies in an insufficient capability check, which fails to adequately restrict which authenticated users can access other users' recently accessed course information. This oversight could lead to...

CVE-2025-49512

A vulnerability was found in Moodle. An extension was omitted from the MathJax configuration shipped with Moodle during the library upgrade to LMS 5.0. This issue results in a Cross-site scripting XSS risk...

CVE-2022-50182

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Align upwards buffer size The hardware can support any image size WxH, with arbitrary W image width and H image height dimensions. Align upwards buffer size for both encoder and decoder. and leave the picture...

SUSE-SU-2025:02020-1 Security update for gstreamer-plugins-base

This update for gstreamer-plugins-base fixes the following issues: - CVE-2024-47538: Fixed stack-buffer overflow in vorbishandleidentificationpacket bnc1234415 - CVE-2024-47600: Fixed out-of-bounds read in gst-discoverer-1.0 commandline tool bnc1234453 - CVE-2024-47615: Fixed out-of-bounds write ...

CVE-2022-50015

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot It is not yet clear, but it is possible to create a firmware so broken that it will send a reply message before a FWREADY message it is not yet clear if...

CVE-2025-6292

creationtimestamp| type| source ---|---|--- 2025-06-19 07:45:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114708912766740408 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 03:18:12+00:00| seen|...

CVE-2022-50007

A flaw was found in the XFRM subsystem in the Linux kernel. A missing decrement of the reference count when an error occurs will cause a memory leak, potentially impacting system performance and resulting in a denial of service...

CVE-2025-5524

creationtimestamp| type| source ---|---|--- 2025-06-19 04:41:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18835 2025-06-19 05:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrwti54zgp2a...

CVE-2022-50086

In the Linux kernel, the following vulnerability has been resolved: block: don't allow the same type rqqos add more than once In our test of iocost, we encountered some list add/del corruptions of innerwalk list in ioctimerfn. The reason can be described as follows: cpu 0 cpu 1 iocqoswrite...

CVE-2025-52467

creationtimestamp| type| source ---|---|--- 2025-06-19 03:40:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18834 2025-06-19 03:50:18+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114707989654328895 2025-06-19 04:01:04+00:00| published-proof-of-concept|...

CVE-2022-50170

In the Linux kernel, the following vulnerability has been resolved: kunit: executor: Fix a memory leak on failure in kunitfiltertests It's possible that memory allocation for 'filtered' will fail, but for the copy of the suite to succeed. In this case, the copy could be leaked. Properly free 'cop...

CVE-2025-5673

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to SQL Injection via the ‘prgSortPostType’ parameter in all versions up to, and including, 8.4.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

CVE-2025-23172

creationtimestamp| type| source ---|---|--- 2025-06-18 23:41:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18822 2025-06-19 01:05:08+00:00| seen| Telegram/o4VR5fP0RObkYE5GCSWcOZP4OP4WWVDrridRceJ4mceL0 2025-06-19 08:50:17+00:00| seen|...