22790 matches found
CVE-2025-34085
creationtimestamp| type| source ---|---|--- 2025-07-09 05:35:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltj3sbkbrs2i 2025-07-09 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ltkpmatwxp2k 2025-07-10 01:11:58+00:00| published-proof-of-concept|...
编号撤回
ring is a library by Brian Smith, an individual developer. This CVE number has been withdrawn...
VulnCheck KEV: CVE-2024-51977
An unauthenticated attacker who can access either the HTTP service TCP port 80, the HTTPS service TCP port 443, or the IPP service TCP port 631, can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mntinfo.csv can be accessed via a GET request and no...
CVE-2025-49604
For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented...
CVE-2025-49739
CVE-2025-49739: Visual Studio elevation of privilege due to improper link resolution before file access ("link following"). The issue could allow a network-access attacker to elevate privileges on a affected machine. Connected sources indicate this CVE has public exploits (per Kaspersky entry in ...
CVE-2024-55599
creationtimestamp| type| source ---|---|--- 2025-07-08 15:19:44+00:00| seen| Telegram/N0n5528azZ2BaHbXsd60Ql3KQaDO31M8tLWhCJYsZAlmIw...
CVE-2025-27061
creationtimestamp| type| source ---|---|--- 2025-07-08 13:19:01+00:00| seen| https://vulnerability.circl.lu/bundle/13f0850e-798e-4625-b315-667b9d13bc30 2025-08-06 01:04:20+00:00| seen| MISP/853ff921-86fb-463b-bc2a-2860bf336b81 2025-08-21 10:03:54+00:00| seen|...
CVE-2025-20998
Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...
CVE-2025-20998
Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...
CVE-2025-20998
Improper access control in SamsungAccount for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to access phone number...
CVE-2025-41665
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file...
CVE-2025-7294
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-543/...
CVE-2025-7256
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-502/...
CVE-2025-7238
creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-505/...
PT-2025-28377
Name of the Vulnerable Software and Affected Versions: SamsungAccount for Galaxy Watch versions prior to SMR Jul-2025 Release 1 Description: The issue is related to improper access control in SamsungAccount for Galaxy Watch, allowing local attackers to access the phone number. Recommendations: Fo...
SUSE CVE-2025-38213
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-53496
creationtimestamp| type| source ---|---|--- 2025-07-07 21:02:26+00:00| seen| https://bsky.app/profile/potato.software/post/3ltfoojtnin2t 2025-07-07 23:26:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltfwqpqsur2b...
CVE-2025-6805 Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability
Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability allows remote attackers to delete arbitrary files on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability. The...
CVE-2025-6804
Marvell QConvergeConsole contains a directory traversal vulnerability in the compressFirmwareDumpFiles function. The flaw stems from insufficient validation of a user-supplied path prior to performing file operations, enabling an attacker to disclose sensitive information in the SYSTEM context wi...
