22792 matches found
CVE-2025-48942
A denial of service flaw was found in vLLM. This flaw allows a remote attacker with access to the /v1/completions endpoint to submit an invalid jsonschema as a guided param, which will crash the vLLM instance. Mitigation Mitigation for this issue is either not available or the currently available...
CVE-2025-4986
creationtimestamp| type| source ---|---|--- 2025-05-30 14:29:51+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfgyb5iiuy2 2025-05-30 14:32:28+00:00| seen|...
CVE-2025-4991
creationtimestamp| type| source ---|---|--- 2025-05-30 14:29:50+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfgyb7l3vc2 2025-05-30 14:32:42+00:00| seen|...
CVE-2025-4989 Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting XSS vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session...
CVE-2025-4429
creationtimestamp| type| source ---|---|--- 2025-05-30 06:49:45+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqen5ujl5ia2...
CVE-2025-48480
creationtimestamp| type| source ---|---|--- 2025-05-30 05:25:31+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeiljtubt52...
CVE-2025-48478
creationtimestamp| type| source ---|---|--- 2025-05-30 05:25:29+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqeilertdon2...
CVE-2025-4659
The CVE-2025-4659 entry concerns the WordPress plugin integrating Salesforce with Contact Form 7, WPForms, Elementor, Formidable, and Ninja Forms. It exposes a Full Path Disclosure vulnerability in all versions up to and including 1.4.4, enabling unauthenticated attackers to retrieve the web appl...
CVE-2025-30466
creationtimestamp| type| source ---|---|--- 2025-05-30 00:10:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqdwz4bxrs2e 2025-05-30 04:00:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114594783750341600 2026-04-02 22:17:36+00:00| seen|...
CVE-2025-44904
hdf5 v1.14.6 was discovered to contain a heap buffer overflow via the H5VMmemcpyvv function...
CVE-2025-5324
creationtimestamp| type| source ---|---|--- 2025-05-29 18:57:38+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdfexpmjmf2 2025-05-29 21:31:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqdo4hme4o2a...
CVE-2025-29632
Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handlergenerated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components...
CVE-2025-27700
There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-22653
creationtimestamp| type| source ---|---|--- 2025-05-29 15:13:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqcyzg2fsj32...
CVE-2023-49604
creationtimestamp| type| source ---|---|--- 2025-05-29 02:05:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqbmxjz6wo2q...
Amazon Linux 2 : yelp-xsl (ALAS-2025-2861)
The version of yelp-xsl installed on the remote host is prior to 3.28.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2861 advisory. A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerabili...
CVE-2025-27703
CVE-2025-27703 affects Absolute Secure Access prior to version 13.54, with a privilege-escalation in the management console. Attackers with administrative access to a subset of privileged features can elevate permissions to access additional console features. Reported impacts: confidentiality low...
CVE-2025-27702 Permissions bypass in the management console of Absolute Secure Access prior to version 13.54
CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly modify settings. The attack complexi...
CVE-2024-47057 User name enumeration possible due to response time difference on password reset form
SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames. User Enumeration via Timing Attack: A user enumeration vulnerability exists in the...
