CVE-2025-25055

creationtimestamp| type| source ---|---|--- 2025-02-18 00:17:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lifybytrn423 2025-02-18 02:35:20+00:00| seen| https://t.me/cvedetector/18266 2025-02-18 03:16:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4726...

Ubuntu: Security Advisory (USN-7269-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-25469

The FFmpeg software (git-master before commit d5873b ) is affected by a memory leak within the libavutil/iamf.c component. This vulnerability, identified as CWE-401 , involves a missing release of memory after its effective lifetime. While the technical impact is rated as partial with a CVSS3.1 s...

CVE-2024-13837

creationtimestamp| type| source ---|---|--- 2025-02-17 19:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lifhgskvf72y 2025-02-17 21:25:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lifopbzyog2v...

CVE-2025-1391

creationtimestamp| type| source ---|---|--- 2025-02-17 14:09:17+00:00| seen| https://infosec.exchange/users/cve/statuses/114019621749555941 2025-02-17 14:15:21+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liewnsiuqu2o 2025-02-17 15:15:19+00:00| seen|...

CVE-2025-1380

creationtimestamp| type| source ---|---|--- 2025-02-17 07:07:16+00:00| seen| https://infosec.exchange/users/cve/statuses/114017962303220578 2025-02-17 07:15:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lie777okip2g 2025-02-17 09:06:02+00:00| seen|...

CVE-2024-13726

The Themes Coder Ecommerce WordPress plugin (versions 1.3.4 and earlier ) contains an unauthenticated SQL injection vulnerability. The flaw exists because the plugin fails to properly sanitize and escape a parameter used in a SQL statement via an AJAX action . This allows unauthenticated attacker...

CVE-2025-1376

CVE-2025-1376 affects GNU elfutils 0.192, specifically the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip . The manipulation leads to a denial of service and requires a local attack. The exploitation difficulty is described as high, and the exploit has been disc...

CVE-2025-1389

creationtimestamp| type| source ---|---|--- 2025-02-17 04:18:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114017297678557169 2025-02-17 05:16:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidyjfng3u2o 2025-02-17 05:31:16+00:00| seen|...

CVE-2025-1372

A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function dumpdatasection/printstringsection of the file readelf.c of the component eu-readelf. The manipulation of the argument z/x leads to buffer overflow. An attack has to b...

SUSE: Security Advisory (SUSE-SU-2024:2184-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-26767

creationtimestamp| type| source ---|---|--- 2025-02-16 23:14:15+00:00| seen| https://infosec.exchange/users/cve/statuses/114016102254909216 2025-02-16 23:16:23+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidegdc36b2p 2025-02-17 00:40:23+00:00| seen|...

CVE-2025-26766

creationtimestamp| type| source ---|---|--- 2025-02-16 23:14:14+00:00| seen| https://infosec.exchange/users/cve/statuses/114016102239466875 2025-02-16 23:16:20+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lidegapxrx2n 2025-02-17 00:40:24+00:00| seen|...

CVE-2024-44044

creationtimestamp| type| source ---|---|--- 2025-02-16 22:24:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114015907473400158 2025-02-16 22:29:10+00:00| seen| https://infosec.exchange/users/cve/statuses/114015925023573005 2025-02-16 23:15:26+00:00| seen|...

CVE-2025-22284

creationtimestamp| type| source ---|---|--- 2025-02-16 22:24:45+00:00| seen| https://infosec.exchange/users/cve/statuses/114015907488834842 2025-02-16 22:29:10+00:00| seen| https://infosec.exchange/users/cve/statuses/114015925039646704 2025-02-16 23:15:45+00:00| seen|...

CVE-2025-1338

creationtimestamp| type| source ---|---|--- 2025-02-16 11:05:51+00:00| seen| https://infosec.exchange/users/cve/statuses/114013238107332522 2025-02-16 11:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lic45e74nj2i 2025-02-16 12:30:15+00:00| seen|...

CVE-2025-1335

creationtimestamp| type| source ---|---|--- 2025-02-16 04:05:28+00:00| seen| https://infosec.exchange/users/cve/statuses/114011585123849118 2025-02-16 04:15:39+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3libeojv26j2h 2025-02-16 05:11:30+00:00|...

CVE-2025-26552

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in badrHan Naver Syndication V2 badr-naver-syndication allows Stored XSS.This issue affects Naver Syndication V2: from n/a through = 0.8.3...

CVE-2024-13500 WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter

The WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 2.6.17 due to insufficient escaping on the user supplied...

CVE-2024-13439 Team – Team Members Showcase Plugin <= 4.4.9 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the response function in all versions up to, and including, 4.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...