WordPress Dessau Theme < 1.9 is vulnerable to Local File Inclusion

Software Dessau Type Theme Vulnerable versions 1.9 Fixed in 1.9 OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-39463 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 0679c8533d71 Credits Bonds Required privilege Unauthenticated Published 17...

Oracle WebCenter Portal (April 2025 CPU)

The 12.2.1.4.0 versions of WebCenter Portal installed on the remote host are affected by a vulnerability as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware component: Discussion Forums XStream. The supported version tha...

Oracle VM VirtualBox (April 2025 CPU)

The 7.1.6 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.6...

CVE-2021-47669

In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcanxmit: fix use after free bug After calling netifrxniskb, dereferencing skb is unsafe. Especially, the canfdframe cfd which aliases skb memory is accessed after the netifrxni...

CVE-2025-32415

In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an XML schema with certain identity constraints, or a crafted XML schema must be used...

Oracle Application Testing Suite (April 2025 CPU)

The versions of Oracle Application Testing Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the April 2025 CPU advisory. - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps...

CVE-2025-43704

creationtimestamp| type| source ---|---|--- 2025-04-16 23:58:41+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12174 2025-04-17 02:06:29+00:00| seen| https://t.me/cvedetector/23194 2025-04-17 02:48:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3ryhuhp2v...

CVE-2025-1568

creationtimestamp| type| source ---|---|--- 2025-04-16 23:58:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12170 2025-04-17 02:06:34+00:00| seen| https://t.me/cvedetector/23197 2025-04-17 02:48:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rwpma32q 2025-04-17...

GHSA-37CP-FGQ5-7WC2

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12169 2025-04-16 23:34:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114350256396276490 2025-04-17 17:27:07+00:00| seen|...

CVE-2025-0756

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12163 2025-04-17 00:48:20+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114350548547803347 2025-04-17 02:06:36+00:00| seen| https://t.me/cvedetector/23199...

CVE-2025-24910

creationtimestamp| type| source ---|---|--- 2025-04-16 22:57:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12160 2025-04-17 02:06:24+00:00| seen| https://t.me/cvedetector/23191 2025-04-17 02:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rxtajk2j...

CVE-2025-3727

creationtimestamp| type| source ---|---|--- 2025-04-16 22:44:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo5cpjcs2i 2025-04-17 00:25:41+00:00| seen| https://t.me/cvedetector/23168...

CVE-2025-32787

creationtimestamp| type| source ---|---|--- 2025-04-16 22:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxo3ljcr22i 2025-04-17 02:06:44+00:00| seen| https://t.me/cvedetector/23206...

CVE-2025-20236

creationtimestamp| type| source ---|---|--- 2025-04-16 18:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349133435273045 2025-04-16 20:14:24+00:00| seen| https://t.me/cvedetector/23135 2025-04-17 03:18:34+00:00| seen|...

CVE-2025-32855

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapuakid2r 2025-04-16 20:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605580627768 2025-04-22 10:00:00+00:00| seen|...

CVE-2025-32869

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapu4ujg2h 2025-04-16 20:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349606070986620 2025-04-16 21:54:57+00:00| seen|...

CVE-2025-32863

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptlex62h 2025-04-16 20:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605818472586 2025-04-16 21:55:09+00:00| seen|...

CVE-2025-32866

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapthz7d2u 2025-04-16 20:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605944527789 2025-04-16 21:54:51+00:00| seen|...

CVE-2025-32858

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapsszen2c 2025-04-16 20:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605679791321 2025-04-16 21:55:11+00:00| seen|...

CVE-2025-2291

Password can be used past expiry in PgBouncer due to authquery not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password...