9693 matches found
CVE-2025-2571
creationtimestamp| type| source ---|---|--- 2025-05-30 15:31:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfkewl7lmc2 2025-05-30 16:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqfmibtbg52p...
CVE-2025-4433
creationtimestamp| type| source ---|---|--- 2025-05-30 12:37:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfaq6inn5e2...
CVE-2025-40909 Perl threads have a working directory race condition where file operations may target unintended paths
Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any...
CVE-2025-4597 Woo Slider Pro - Drag Drop Slider Builder For WooCommerce <= 1.12 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion
The Woo Slider Pro – Drag Drop Slider Builder For WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wooslideprodeletedraftpreview AJAX action in all versions up to, and including, 1.12. This makes it possible for...
CVE-2025-4963
The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, t...
CVE-2025-5142 Simple Page Access Restriction <= 1.0.31 - Cross-Site Request Forgery via Multiple Parameters
The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31. This is due to missing nonce validation and capability checks in the settings save handler in the settings.php script. This makes it possible for...
CVE-2025-4635
creationtimestamp| type| source ---|---|--- 2025-05-30 08:55:07+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeubbgk35m2...
CVE-2025-4636
creationtimestamp| type| source ---|---|--- 2025-05-30 08:55:06+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeub4zagpt2...
CVE-2025-48487
creationtimestamp| type| source ---|---|--- 2025-05-30 06:50:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqen5ynjint2...
CVE-2025-48481
creationtimestamp| type| source ---|---|--- 2025-05-30 05:25:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeili6efot2...
CVE-2025-48484
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.178, the application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data in the conversation POST data body. This issue has been patched in versio...
CVE-2025-44905
creationtimestamp| type| source ---|---|--- 2025-05-30 03:52:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqedexv33352 2025-05-31 09:32:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqhguwep7l2s...
CVE-2025-48068 Information exposure in Next.js dev server due to lack of origin verification
Next.js is a React framework for building full-stack web applications. In versions starting from 13.0 to before 14.2.30 and 15.0.0 to before 15.2.2, Next.js may have allowed limited source code exposure when the dev server was running with the App Router enabled. The vulnerability only affects...
CVE-2025-44619
creationtimestamp| type| source ---|---|--- 2025-05-30 02:41:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqe7gty3zr52 2025-05-30 06:16:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqeli3zngw2r 2026-07-06...
CVE-2024-12224
creationtimestamp| type| source ---|---|--- 2025-05-30 02:41:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqe7grq375t2 2025-05-30 06:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqeknad7p627 2025-09-12...
PT-2025-23358 · Undefined · Undefined
CVE-2025-48870 Rejected reason https://t.co/iWjC7gHSaV...
CVE-2025-44906
The jhead v3.08 library contains a heap-use-after-free vulnerability in the ProcessFile function located at jhead.c . The root cause is improper memory management in ReadJpegSections , where a memory buffer is reallocated and subsequently accessed after being freed. This condition can be triggere...
CVE-2025-44619
The Tinxy WiFi Lock Controller v1 RF is vulnerable due to a configuration flaw that causes it to transmit on an open Wi-Fi network . This improper access control allows unauthorized attackers to join the network without any authentication. To mitigate this risk, it is recommended to configure the...
Debian: Security Advisory (DLA-4191-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...