9693 matches found
CVE-2025-30466
This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. A website may be able to bypass Same Origin Policy...
CVE-2025-41233
creationtimestamp| type| source ---|---|--- 2025-05-29 21:31:05+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lqdo3x7xps25 2025-06-12 22:34:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18236 2025-06-13 01:10:38+00:00| seen|...
CVE-2025-32752
creationtimestamp| type| source ---|---|--- 2025-05-29 20:05:23+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdjc62i3mw2 2025-06-04 10:59:48+00:00| seen| https://bsky.app/profile/amberwolfsec.bsky.social/post/3lqrnmnn3q22x 2025-06-04...
CVE-2025-5066 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2025-46701
Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component of a URI mapped to the CGI servlet. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.6, from 10.1.0-M1...
CVE-2025-48471
creationtimestamp| type| source ---|---|--- 2025-05-29 16:42:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqd5uffcie42 2025-05-29 18:24:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqddo5lnw22m...
CVE-2025-46570 vLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-Channel
vLLM is an inference and serving engine for large language models LLMs. Prior to version 0.9.0, when a new prompt is processed, if the PageAttention mechanism finds a matching prefix chunk, the prefill process speeds up, which is reflected in the TTFT Time to First Token. These timing differences...
CVE-2025-48475 FreeScout Vulnerable to Insufficient Authorization
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the System does not provide a check on which "clients" of the System an authorized user can view and edit, and which ones they cannot. As a result, an authorized user who does not have access to any of the...
CVE-2025-48474
FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, the application incorrectly checks user access rights for conversations. Users with showonlyassignedconversations enabled can assign themselves to an arbitrary conversation from the mailbox to which they have...
CVE-2025-5321 aimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation
A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack c...
CVE-2025-5334
The Devolutions Remote Desktop Manager application contains a vulnerability in the user vaults component that allows authenticated users to gain unauthorized access to private personal information. The root cause is that entries may be unintentionally moved from user vaults to shared vaults when ...
CVE-2025-37995
creationtimestamp| type| source ---|---|--- 2025-05-29 13:51:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcufdfi52n2...
CVE-2025-37998 openvswitch: Fix unsafe attribute parsing in output_userspace()
In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix unsafe attribute parsing in outputuserspace This patch replaces the manual Netlink attribute iteration in outputuserspace with nlaforeachnested, which ensures that only well-formed attributes are processed...
CVE-2025-48046
creationtimestamp| type| source ---|---|--- 2025-05-29 12:40:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcqfmdnnab2 2025-05-29 13:51:56+00:00| seen|...
MINI-WCPV-VHCX-3JFH
Bulletin has no description...
MINI-QRVX-VGV3-HV4F
Bulletin has no description...
MINI-QG2C-5QH3-GJW3
Bulletin has no description...
MINI-P6C3-8PP7-279V
Bulletin has no description...