CVE-2025-27624

A cross-site request forgery CSRF vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets e.g., Build Queue and Build Executor Status widgets...

CVE-2025-27624

A cross-site request forgery CSRF vulnerability in Jenkins 2.499 and earlier, LTS 2.492.1 and earlier allows attackers to have users toggle their collapsed/expanded status of sidepanel widgets e.g., Build Queue and Build Executor Status widgets...

CVE-2025-27624

CVE-2025-27624 : Jenkins versions 2.499 and earlier, and LTS 2.492.1 and earlier, are affected by a CSRF vulnerability that lets an attacker toggle the collapsed/expanded state of sidepanel widgets (e.g., Build Queue, Build Executor Status) in affected users. The issue arises from the HTTP endpoi...

mxiqi.com Cross Site Scripting vulnerability OBB-4032831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-3738-P9X3-MV9R

creationtimestamp| type| source ---|---|--- 2025-03-05 21:34:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6621...

CVE-2023-0193

creationtimestamp| type| source ---|---|--- 2025-03-05 21:34:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6616...

CVE-2024-53458

creationtimestamp| type| source ---|---|--- 2025-03-05 18:55:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6585 2025-03-05 19:59:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljnrdravwg22 2025-03-05 21:07:30+00:00| seen|...

CVE-2025-25124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in devu Status Updater fb-status-updater allows Reflected XSS.This issue affects Status Updater: from n/a through = 1.9.2...

CVE-2025-25130

Relative Path Traversal vulnerability in Shah Alom Delete Comments By Status delete-comments-by-status allows Path Traversal.This issue affects Delete Comments By Status: from n/a through = 2.1.1...

CVE-2024-13787

creationtimestamp| type| source ---|---|--- 2025-03-05 09:35:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6519 2025-03-05 11:49:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmvyi2z5b2y 2025-03-05 12:46:00+00:00| seen| https://t.me/cvedetector/19617 2025-03-06...

CVE-2025-27668

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6503 2025-03-05 08:34:55+00:00| seen| https://t.me/cvedetector/19600 2025-03-05 09:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuukc422s 2025-03-06...

CVE-2025-27678

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6493 2025-03-05 08:34:49+00:00| seen| https://t.me/cvedetector/19595 2025-03-05 09:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuv4fsu2f 2025-03-06...

Linux Distros Unpatched Vulnerability : CVE-2024-43888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm: listlru: fix UAF for memory cgroup The memcgroupfromslabobj is supposed to be called und...

Linux Distros Unpatched Vulnerability : CVE-2024-35868

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix potential UAF in cifsstatsprocwrite Skip sessions that are being teared down status == SESEXITING to avoid UAF. CVE-2024-35868 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2024-38625

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is called. CVE-2024-38625 Note that Nessus relies on the presence of the package as reported by...

Linux Distros Unpatched Vulnerability : CVE-2024-0131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A...

Linux Distros Unpatched Vulnerability : CVE-2021-44502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, an attacker can control the size of a memset that...

Linux Distros Unpatched Vulnerability : CVE-2024-31745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-2002. Reason: This candidate is a duplicate of CVE-2024-2002. Notes: All CVE users shoul...

Linux Distros Unpatched Vulnerability : CVE-2022-2881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process. CVE-2022-2881 Note that Nessus relie...

Linux Distros Unpatched Vulnerability : CVE-2024-35809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI/PM: Drain runtime-idle callbacks before driver removal A race condition between the .runtimeidle callback and the .remove callback in the rtsxpcr PCI driver...