CVE-2022-25369

An issue was discovered in Dynamicweb before 9.12.8. An attacker can add a new administrator user without authentication. This flaw exists due to a logic issue when determining if the setup phases of the product can be run again. Once an attacker is authenticated as the new admin user they have...

CVE-2026-22984

creationtimestamp| type| source ---|---|--- 2026-01-23 17:10:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md46y4gfdw2c 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2026-22986

creationtimestamp| type| source ---|---|--- 2026-01-23 17:08:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md46ux52gp26...

CVE-2026-22995

creationtimestamp| type| source ---|---|--- 2026-01-23 17:00:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115945478831888782 2026-01-23 17:24:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md47qfunwz2h...

CVE-2025-71177 LavaLite CMS <= 10.1.0 Stored XSS via Package Creation and Search

LavaLite CMS versions up to and including 10.1.0 contain a stored cross-site scripting vulnerability in the package creation and search functionality. Authenticated users can supply crafted HTML or JavaScript in the package Name or Description fields that is stored and later rendered without prop...

CVE-2025-71177

LavaLite CMS ≤ 10.1.0 is reported to have a stored XSS vulnerability in package creation and package search. Authenticated users can inject HTML/JavaScript into the Package Name or Description fields, which is stored and later rendered without proper output encoding in search results, enabling po...

CVE-2026-22985

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...

UBUNTU-CVE-2026-22988

In the Linux kernel, the following vulnerability has been resolved: arp: do not assume devhardheader does not change skb-head arpcreate is the only devhardheader caller making assumption about skb-head being unchanged. A recent commit broke this assumption. Initialize @arp pointer after...

UBUNTU-CVE-2026-22985

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...

CVE-2026-22985

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...

CVE-2026-22985

CVE-2026-22985 affects the Linux kernel idpf driver. The vulnerability causes a NULL pointer dereference when ethtool operations (e.g., rxhash) are invoked before the interface is up due to the RSS LUT not being initialized. The fix moves RSS LUT initialization from ndo_open to vport creation to ...

CVE-2026-22985

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...

CVE-2026-22985 idpf: Fix RSS LUT NULL pointer crash on early ethtool operations

In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed befor...

CVE-2025-13921

creationtimestamp| type| source ---|---|--- 2026-01-23 14:16:12+00:00| seen| https://gist.github.com/Darkcrai86/092cf39da49853e25fe1137e7ed78623...

CVE-2025-46699

creationtimestamp| type| source ---|---|--- 2026-01-23 11:25:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3loif4ux2g...

OESA-2026-1238 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

OESA-2026-1237 python-filelock security update

This package contains a single module, which implements a platform independent file locking mechanism for Python. Security Fixes: filelock is a platform-independent file lock for Python. Prior to version 3.20.3, a TOCTOU race condition vulnerability exists in the SoftFileLock implementation of th...

CVE-2026-22271

creationtimestamp| type| source ---|---|--- 2026-01-23 10:09:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hi2lwph27 2026-01-23 11:20:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md3lfjvosw2j...

WordPress All-in-One Video Gallery plugin <= 4.6.4 - Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability

Missing Authorization to Unauthenticated Bunny Stream Video Creation/Deletion vulnerability discovered by andrea bocchetti in WordPress Plugin All-in-One Video Gallery versions = 4.6.4...

CVE-2026-21524

creationtimestamp| type| source ---|---|--- 2026-01-23 07:47:39+00:00| seen| https://gist.github.com/Darkcrai86/20485358608ca278d4d824dc3d84d8d8 2026-01-23 08:04:03+00:00| seen| https://gist.github.com/Darkcrai86/150b0c4aed7835314b8d3ce105c15f45 2026-02-13 04:55:23+00:00| seen|...