CVE-2022-49714

The CVE-2022-49714 item concerns a refcount leak in the Linux kernel’s irqchip/realtek-rtl code within map_interrupts. The root cause was that of_find_node_by_phandle() returned a node pointer with an incremented refcount and missing of_node_put() on all paths, including error paths. The fix is t...

CVE-2022-49429 RDMA/hfi1: Prevent panic when SDMA is disabled

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1CAPSDMA off, a call to hfi1writeiter will dereference a NULL pointer and panic. A typical stack frame is: sdmaselectuserengine hfi1...

CVE-2025-1576

creationtimestamp| type| source ---|---|--- 2025-02-23 05:20:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5082 2025-02-23 07:41:53+00:00| seen| https://t.me/cvedetector/18736 2025-02-23 08:12:52+00:00| seen|...

CVE-2024-5111

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:44+00:00| seen| Telegram/d9UIilcKuN506FAPEIMUqoyFKXnGznSu9G4mWQINcHaW9iCX...

CVE-2024-2768

creationtimestamp| type| source ---|---|--- 2025-02-21 22:10:25+00:00| seen| Telegram/hE1t5epaEAzRM6-15VVZ7xEVOefsy6lHeHEf-CBRH3dzVxN2...

CVE-2025-0425

Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions "nt authority\system". By changing the...

CVE-2022-31890

creationtimestamp| type| source ---|---|--- 2025-02-14 10:09:23+00:00| seen| Telegram/mcFehyru1ukqJfl1PK8agRWo8nUfFm76AcpFydgcLsHLH...

CVE-2025-26788

creationtimestamp| type| source ---|---|--- 2025-02-14 07:43:30+00:00| seen| https://infosec.exchange/users/cve/statuses/114001117806184646 2025-02-14 08:15:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li4r6djxlw2g 2025-02-14 08:48:27+00:00| seen|...

CVE-2025-26580

creationtimestamp| type| source ---|---|--- 2025-02-13 14:17:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li2uw67wde2x 2025-02-13 15:10:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4243 2025-02-13 15:11:03+00:00| seen|...

CVE-2025-26562 WordPress RSS FIlter Plugin <= 1.2 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shambhu Patnaik RSS Filter allows Stored XSS. This issue affects RSS Filter: from n/a through 1.2...

CVE-2025-21571

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.24 and prior to 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2022-36339

Improper input validation in firmware for IntelR NUC 8 Compute Element, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access...

CVE-2022-36076

NodeBB Forum Software is powered by Node.js and supports either Redis, MongoDB, or a PostgreSQL database. Due to an unnecessarily strict conditional in the code handling the first step of the SSO process, the pre-existing logic that added and later checked a nonce was inadvertently rendered opt-i...

CVE-2022-36010

This library allows strings to be parsed as functions and stored as a specialized component, JsonFunctionValue. To do this, Javascript's eval function is used to execute strings that begin with "function" as Javascript. This unfortunately could allow arbitrary code to be executed if it exists as ...

CVE-2022-24897

APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.3 and prior to 12.6.7, 12.10.3, and 13.0, the velocity scripts are not properly sandboxed against using the Java File API to perform read or write operations on the filesystem...

CVE-2022-20649

A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container. This vulnerability exists because the debug mode is incorrectly enabled...

CVE-2022-28669

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.2.1.53537. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-22089

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

CVE-2025-20183 Cisco Secure Web Appliance Range Request Bypass Vulnerability

A vulnerability in a policy-based Cisco Application Visibility and Control AVC implementation of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to evade the antivirus scanner and download a malicious file onto an endpoint. The vulnerability i...

CVE-2020-5232

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...