865 matches found
CVE-2025-8916
Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcpkix on All API modules, Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BCPKIX FIPS bcpkix-fips on All API modules allows Excessiv...
CVE-2025-54205
Substance3D - Sampler versions 5.0.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
Linux Distros Unpatched Vulnerability : CVE-2022-49927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfs4: Fix kmemleak when allocate slot failed If one of the slot allocate failed, should cleanup all the other allocated slots, otherwise, the allocated slots wi...
CLSA-2025-1753769031 glib2: Fix of CVE-2025-4373
CVE-2025-4373: fix integer overflow in gstringinsertunichar function to prevent buffer underwrite...
The vulnerability of NETGEAR RAX30 router microprogramming software, related to improper cleaning or freeing of resources, allows a intruder to trigger a service failure.
The vulnerability of NETGEAR RAX30 router microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2025-0253 HCL IEM is affected by a cookie attribute not set vulnerability
HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure to potential vulnerabilities...
CVE-2024-53286
creationtimestamp| type| source ---|---|--- 2025-07-23 04:34:33+00:00| seen| Telegram/8ciReg4XgtxU0DdOSBqBxWkKPmZ0YyveWaK086BwK-Kd0...
CVE-2025-36057
creationtimestamp| type| source ---|---|--- 2025-07-21 18:34:27+00:00| seen| Telegram/f69C7OYqpUjl176j50OorOLaQen3qAEtfPE0R-rAiQLw...
CVE-2025-34300
creationtimestamp| type| source ---|---|--- 2025-07-16 12:25:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-34300.yaml 2025-07-16 13:31:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114863157616339989 2025-07-18...
PT-2025-29227 · Apache · Apache Tgml
Name of the Vulnerable Software and Affected Versions: Apache TGML versions affected versions not specified Description: A CWE-668: Exposure of Resource to Wrong Sphere issue exists, exposing TGML diagram resources to an incorrect control sphere. This allows other authenticated users to potential...
FreeBSD : Mozilla -- persistent UUID that identifies browser (9320590b-58cf-11f0-b4ad-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 9320590b-58cf-11f0-b4ad-b42e991fc52e advisory. [email protected] reports: An attacker who enumerated resources from the WebCompat extension could...
CVE-2025-47871
creationtimestamp| type| source ---|---|--- 2025-06-30 17:07:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19944...
SUSE-SU-2025:20454-1 Security update for gpg2
This update for gpg2 fixes the following issues: Fix regression for the recent malicious subkey DoS fix in CVE-2025-30258. bsc1236931, bsc1239119, CVE-2025-30258...
CVE-2025-6604
creationtimestamp| type| source ---|---|--- 2025-06-25 13:50:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19440...
Security update for pam-config
This update for pam-config fixes the following issues: CVE-2025-6018: Stop adding pamenv in AUTH stack, and be sure to put this module at the really end of the SESSION stack bsc1243226. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
CVE-2025-52488
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. In versions 6.0.0 to before 10.0.1, DNN.PLATFORM allows a specially crafted series of malicious interaction to potentially expose NTLM hashes to a third party SMB server. This issue has been...
CVE-2025-52795
creationtimestamp| type| source ---|---|--- 2025-06-20 16:17:11+00:00| seen| Telegram/jX3P-npZhepmJEJEvfrnYKXIW1DnkYbd7t33-vEA6eRgmU 2025-06-23 16:47:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19227...
CVE-2025-23173
The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI. By default, the websockify service is exposed on port 6080 and accessible from the internet. This exposure introduces significant risk, as websockify has known...
CVE-2022-50077
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix reference count leak in aapivotroot The aapivotroot function has a reference counting bug in a specific path. When aareplacecurrentlabel returns on success, the function forgets to decrement the reference count of...