CVE-2025-53999

Unauthenticated Broken Access Control in Altair = 5.2.2 versions...

CVE-2025-62300

HCL IntelliOps Event Management (IEM) has a race condition creating a timing window where an unauthenticated, network-adjacent attacker can modify a resource, causing unpredictable behavior with high integrity impact (CVSS 5.9). No patch version or exploit details are provided; monitor HCL PSIRT ...

ROOT-OS-DEBIAN-11-CVE-2023-44431 CVE-2023-44431 in bluez - Patched by Root

Root has patched CVE-2023-44431 in the bluez package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2022-3715 CVE-2022-3715 in bash - Patched by Root

Root has patched CVE-2022-3715 in the bash package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-49582 CVE-2023-49582 in apr - Patched by Root

Root has patched CVE-2023-49582 in the apr package for Root:Debian:11. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-25639 CVE-2026-25639 in axios - Patched by Root

Root has patched CVE-2026-25639 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44494 CVE-2026-44494 in axios - Patched by Root

Root has patched CVE-2026-44494 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42038 CVE-2026-42038 in axios - Patched by Root

Root has patched CVE-2026-42038 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42039 CVE-2026-42039 in axios - Patched by Root

Root has patched CVE-2026-42039 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44488 CVE-2026-44488 in axios - Patched by Root

Root has patched CVE-2026-44488 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44487 CVE-2026-44487 in axios - Patched by Root

Root has patched CVE-2026-44487 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-42041 CVE-2026-42041 in axios - Patched by Root

Root has patched CVE-2026-42041 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-1528 CVE-2026-1528 in undici - Patched by Root

Root has patched CVE-2026-1528 in the undici package for Root:npm. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-32327 CVE-2026-32327 in apr-util - Patched by Root

Root has patched CVE-2026-32327 in the apr-util package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-14953

creationtimestamp| type| source ---|---|--- 2026-08-20 08:20:38+00:00| seen| https://infosec.exchange/users/certvde/statuses/117126859166464287...

CVE-2025-14601

creationtimestamp| type| source ---|---|--- 2026-08-20 08:08:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/did3cppqdpbkc 2026-08-20 12:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-14601...

Progress Kemp Flowmon - Command Injection

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands. id: CVE-2024-2389 info: nam...

Grafana Post-Auth DuckDB - SQL Injection To File Read

The SQL Expressions experimental feature of Grafana allows for the evaluation of duckdb queries containing user input. These queries are insufficiently sanitized before being passed to duckdb, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or highe...

SureTriggers – All-in-One Automation Platform ≤ 1.0.78 - Authentication Bypass

The SureTriggers- All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secretkey' value in the 'autheticateuser' function in all versions up to, and including, 1.0.78. Th...

WordPress AI Engine Plugin - Token Exposure

Unauthenticated sensitive information exposure in AI Engine WordPress plugin = 3.1.3 exposes bearer tokens via REST API endpoints when No-Auth URL is enabled. id: CVE-2025-11749 info: name: WordPress AI Engine Plugin - Token Exposure author: 4m3rr0r severity: critical description: | Unauthenticat...