9431 matches found
CVE-2024-53019
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources...
CVE-2025-21485
creationtimestamp| type| source ---|---|--- 2025-06-03 06:11:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomz4dffci2 2025-06-03 07:02:50+00:00| seen| Telegram/VIdmBTFSmAuaRWgqjbv-5X-czhezVyPzv8S4BEAWYM2w 2025-06-03 09:06:48+00:00|...
CVE-2025-5489
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-23103
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bounds writes...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-44148
creationtimestamp| type| source ---|---|--- 2025-06-02 21:00:04+00:00| published-proof-of-concept| Telegram/06GZocrCG6eOyV53sFao3hKZD1hDVJHM749gzYRHtjl7dUE 2025-06-03 16:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppvydhbup2...
CVE-2025-48387 tar-fs has issue where extract can write outside the specified dir with a specific tarball
tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside the specified dir with a specific tarball. This has been patched in versions 3.0.9, 2.1.3, and 1.16.5. As a workaround, use the ignore option to ignore n...
CVE-2025-49069 WordPress Contact Forms by Cimatti plugin <= 1.9.8 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: from n/a through = 1.9.8...
CVE-2025-27953
creationtimestamp| type| source ---|---|--- 2025-06-02 18:34:17+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqng2oicygi2 2025-06-02 20:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqnmq7ea762j...
CVE-2025-20297
In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the pdfgen/render REST endpoint th...
CVE-2025-37096
A command injection remote code execution vulnerability exists in HPE StoreOnce Software...
CVE-2025-5447
A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. It has been declared as critical. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter. The manipulation of the...
Moderate: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...
CVE-2025-37091
A command injection remote code execution vulnerability exists in HPE StoreOnce Software...
CVE-2025-37090
CVE-2025-37090 describes a server-side request forgery in HPE StoreOnce Software . Public sources confirm the affected product and vulnerability class (SSRF) with a high CVSS3.1 base score (9.8) and network attack vector, no user interaction required. The available connected documents do not spec...
Key Takeaways from the Take Command Summit 2025: Risk Revolution – Proactive Strategies for Exposure Management
At the Take Command 2025 Virtual Cybersecurity Summit, a standout session titled Risk Revolution brought together Rapid7 product leaders and ESG analyst Tyler Shields to unpack the evolution of exposure management — and how organizations can build more context-driven, proactive risk strategies...
CVE-2025-48990
creationtimestamp| type| source ---|---|--- 2025-06-02 12:01:30+00:00| published-proof-of-concept| Telegram/rXYL1lXWkEU6X4s-B12vmJDiUkp3J5RpkWN8Rf8Wlc0XZWI 2025-06-02 13:29:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmuumvgmde2...
CVE-2025-5439
creationtimestamp| type| source ---|---|--- 2025-06-02 11:11:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmncyinzqa2...
CVE-2025-5438
CVE-2025-5438 affects Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 devices with firmware versions 1.0.013.001, 1.0.04.001/1.0.04.002, 1.1.05.003, and 1.2.07.001. The WPS function at /goform/WPS is vulnerable to command injection through manipulation of the PIN argument, and the attack can be...