Linux Distros Unpatched Vulnerability : CVE-2020-12474

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public UR...

CVE-2025-9440

creationtimestamp| type| source ---|---|--- 2025-08-26 04:46:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpibfnic2v...

CVE-2025-9439

creationtimestamp| type| source ---|---|--- 2025-08-26 04:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxbpeggnxc2z...

TOTOLINK A3002R url parameter buffer overflow vulnerability

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that originates from improperly...

Linux Distros Unpatched Vulnerability : CVE-2017-17523

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows...

Linux Distros Unpatched Vulnerability : CVE-2017-17519

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batteriesConfig.mlp in OCaml Batteries Included aka ocaml-batteries 2.6 does not validate strings before launching the program specified by the BROWSER...

CVE-2025-9361

creationtimestamp| type| source ---|---|--- 2025-08-23 14:34:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx36vfdumw2p 2025-08-24 10:31:46+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lx5bt3hxfz2u...

CVE-2025-58042

creationtimestamp| type| source ---|---|--- 2025-08-23 05:15:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx27nx5poi2p...

CVE-2025-22860

creationtimestamp| type| source ---|---|--- 2025-08-23 05:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx273wtvr62p...

GHSA-MM62-GWJ5-J285 Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users guests to access via URL files...

CVE-2025-43758

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated users guests to access via URL files...

CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

CVE-2025-36114

IBM QRadar SOAR Plugin App 1.0.0 through 5.6.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-54925

CWE-918: Server-Side Request Forgery SSRF vulnerability exists that could cause unauthorized access to sensitive data when an attacker configures the application to access a malicious url...

CVE-2025-55706

URL redirection to untrusted site 'Open Redirect' issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL...

CVE-2025-55625

An open redirect vulnerability in Reolink v4.54.0.4.20250526 allows attackers to redirect users to a malicious site via a crafted URL. NOTE: this is disputed by the Supplier because it is intentional behavior that supports redirection to Alexa URLs, which are not guaranteed to remain at the same...

CVE-2024-52786

An authentication bypass vulnerability in anji-plus AJ-Report up to v1.4.2 allows unauthenticated attackers to execute arbitrary code via a crafted URL...

CVE-2025-4044

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL...

CVE-2025-57829

creationtimestamp| type| source ---|---|--- 2025-08-21 06:42:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwvdmuvgqb2p...

Linux Distros Unpatched Vulnerability : CVE-2022-3172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client...