CVE-2025-22019

In the Linux kernel, the following vulnerability has been resolved: bcachefs: bch2ioctlsubvolumedestroy fixes bch2evictsubvolumeinodes was getting stuck - due to incorrectly pruning the dcache. Also, fix missing permissions checks...

CVE-2025-3676

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuslm4i2l 2025-04-16 11:50:56+00:00| seen| https://t.me/cvedetector/23060...

CVE-2025-31363

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfusbpuw2h 2025-04-16 13:31:35+00:00| seen| https://t.me/cvedetector/23080...

CVE-2025-24839

creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfurl7k62v 2025-04-16 11:51:00+00:00| seen| https://t.me/cvedetector/23062...

CVE-2018-16606

creationtimestamp| type| source ---|---|--- 2025-04-16 09:30:26+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmwbrptwnu2w 2025-04-17 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvxkyi42a...

GHSA-H99M-6755-RGWC

creationtimestamp| type| source ---|---|--- 2025-04-16 08:55:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11997 2025-04-16 13:03:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114347775337646077...

CVE-2025-3674

The CVE-2025-3674 entry concerns TOTOLINK A3700R (9.1.2u.5822_B20200513). The vulnerability affects the setUrlFilterRules function in /cgi-bin/cstecgi.cgi, causing improper access controls that can be exploited remotely. Public disclosure of the exploit is noted. The documents do not provide a co...

CVE-2024-58249

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...

CVE-2025-30982

creationtimestamp| type| source ---|---|--- 2025-04-15 22:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o3nida2g 2025-04-15 22:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11957 2025-04-16 01:49:01+00:00| seen| https://t.me/cvedetector/23028...

CVE-2025-31950

An unauthenticated attacker can obtain EV charger energy consumption information of other users...

CVE-2025-27927

An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...

CVE-2025-31933

An unauthenticated attacker can check the existence of usernames in the system by querying an API...

CVE-2025-30719

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

CVE-2025-30689

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

CVE-2025-30254

An unauthenticated attacker can obtain a serial number of a smart meters using its owner's username...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-30737

CVE-2025-30737 affects Oracle Smart View for Office (Core Smart View) and is documented for version 24.200. The vulnerability enables a high-privileged attacker, with network access via HTTP, to compromise the product. Exploitation requires user interaction from a person other than the attacker, ...

CVE-2025-30732

The CVE refers to Oracle E-Business Suite, Oracle Application Object Library (AOL) Core, affected in 12.2.3–12.2.14. An unauthenticated attacker with network access via HTTP can compromise AOL, with human interaction required, potentially enabling unauthorized update/insert/delete and read access...

CVE-2025-30729

The CVE-2025-30729 vulnerability affects Oracle Communications Order and Service Management (OC OSM) in Oracle Communications Applications, specifically versions 7.4.0–7.5.0. An attacker with network access via HTTP and low privileges can exploit it, with user interaction required, to cause unaut...