CVE-2025-39602

Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Table Lite: from n/a through = 3.9.5...

CVE-2025-39572 WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through = 1.0.38...

CVE-2025-22019

In the Linux kernel, the following vulnerability has been resolved: bcachefs: bch2ioctlsubvolumedestroy fixes bch2evictsubvolumeinodes was getting stuck - due to incorrectly pruning the dcache. Also, fix missing permissions checks...

CVE-2025-3676

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuslm4i2l 2025-04-16 11:50:56+00:00| seen| https://t.me/cvedetector/23060...

CVE-2025-31363

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfusbpuw2h 2025-04-16 13:31:35+00:00| seen| https://t.me/cvedetector/23080...

CVE-2025-24839

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfurl7k62v 2025-04-16 11:51:00+00:00| seen| https://t.me/cvedetector/23062...

CVE-2018-16606

creationtimestamp| type| source ---|---|--- 2025-04-16 09:30:26+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmwbrptwnu2w 2025-04-17 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvxkyi42a...

GHSA-H99M-6755-RGWC

creationtimestamp| type| source ---|---|--- 2025-04-16 08:55:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11997 2025-04-16 13:03:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114347775337646077...

CVE-2025-3674

The CVE-2025-3674 entry concerns TOTOLINK A3700R (9.1.2u.5822_B20200513). The vulnerability affects the setUrlFilterRules function in /cgi-bin/cstecgi.cgi, causing improper access controls that can be exploited remotely. Public disclosure of the exploit is noted. The documents do not provide a co...

CVE-2024-58249

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...

CVE-2025-30982

creationtimestamp| type| source ---|---|--- 2025-04-15 22:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o3nida2g 2025-04-15 22:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11957 2025-04-16 01:49:01+00:00| seen| https://t.me/cvedetector/23028...

CVE-2025-31950

An unauthenticated attacker can obtain EV charger energy consumption information of other users...

CVE-2025-27927

An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...

CVE-2025-31933

An unauthenticated attacker can check the existence of usernames in the system by querying an API...

CVE-2025-30719

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

CVE-2025-30689

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

CVE-2025-30254

An unauthenticated attacker can obtain a serial number of a smart meters using its owner's username...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-30737

CVE-2025-30737 affects Oracle Smart View for Office (Core Smart View) and is documented for version 24.200. The vulnerability enables a high-privileged attacker, with network access via HTTP, to compromise the product. Exploitation requires user interaction from a person other than the attacker, ...