CVE-2025-3769

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.92 via the 'viewbookingsummaryinlightbox' due to missing validation on a user controlled key. This makes it possible...

CVE-2025-4430

creationtimestamp| type| source ---|---|--- 2025-05-14 11:00:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tna6kslj2 2025-05-14 11:31:28+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16303 2025-05-14 13:02:53+00:00| seen|...

CVE-2025-47891

creationtimestamp| type| source ---|---|--- 2025-05-14 06:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp4diojxfd2h...

CVE-2025-26795

creationtimestamp| type| source ---|---|--- 2025-05-14 00:48:43+00:00| seen| https://seclists.org/oss-sec/2025/q2/141 2025-05-14 11:00:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4tncrgl7p2 2025-05-14 11:31:20+00:00| seen|...

CVE-2025-45835

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...

CVE-2025-43563

creationtimestamp| type| source ---|---|--- 2025-05-14 00:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3pehkwoq2o 2025-05-15 04:32:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16447...

CVE-2025-44879

The Winstars WS-WN572HP3 wireless access point, specifically version V230525 , is vulnerable to a buffer overflow in the /www/cgi-bin/upload.cgi component. An attacker can exploit this by sending a crafted HTTP request , resulting in a Denial of Service (DoS) . As a temporary workaround, it is re...

GLSA-202505-07 : FreeType: Remote Code Execution

The remote host is affected by the vulnerability described in GLSA-202505-07 FreeType: Remote Code Execution Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly fr...

CVE-2025-21094

Improper input validation in the UEFI firmware DXE module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20103

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20101

Out-of-bounds read for some IntelR Graphics Drivers may allow an authenticated user to potentially enable information disclosure or denial of service via local access...

CVE-2025-20103

Insufficient resource pool in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-45332

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-45332

Exposure of sensitive information caused by shared microarchitectural predictor state that influences transient execution in the indirect branch predictors for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-36292

Intel Data Center GPU Flex Series for Windows driver before version 31.0.101.4314 suffers from improper buffer restrictions, potentially enabling local denial of service by an authenticated user. Affected models include Flex 140/170; mitigation is to update to 31.0.101.4314 or later (Intel adviso...

CVE-2024-28956

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-28954

Incorrect default permissions for some IntelR Graphics Driver installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24308

Improper input validation in the UEFI firmware error handler for the IntelR Server D50DNP and M50FCP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-20616

Uncontrolled resource consumption for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via adjacent access...