CVE-2022-49920

The CVE-2022-49920 entry concerns a race in the Linux kernel netfilter nf_tables netlink notifier that can release objects while a transaction context may still reference them. The root cause is a race between the commit release path (invoked via call_rcu and running locklessly) and object remova...

CVE-2025-26382

Under certain circumstances the iSTAR Configuration Utility ICU tool could have a buffer overflow issue...

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

CVE-2025-28031

TOTOLINK A810R V4.1.2cu.5182B20201026 was discovered to contain a hardcoded password for the telnet service in product.ini...

CVE-2024-57493

CVE-2024-57493 affects redoxOS relibc prior to commit 98aa4ea5. The vulnerability arises from an issue in the relibc setsockopt implementation that allows a local attacker to cause a denial of service. Impact is limited to availability degradation; no confidentiality or integrity impact is indica...

CVE-2025-29316

An issue in DataPatrol Screenshot watermark, printing watermark agent v.3.5.2.0 allows a physically proximate attacker to obtain sensitive information. NOTE: the Supplier disputes the Print Job Watermark Bypass claim because the watermark is added by hooking into the OS printing mechanism, and th...

CVE-2025-29040

D-Link DIR-823x devices (firmware build 240802) are affected by a command-injection/remote-code-execution flaw arising from improper handling of the target_addr key value and the function 0x41737c. Reported impact is arbitrary code execution by an unauthenticated remote attacker, potentially comp...

CVE-2025-29453

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component...

CVE-2025-31360

Unauthenticated attackers can trigger device actions associated with specific "scenes" of arbitrary users...

CVE-2025-3512

A flaw was found in QT. This vulnerability allows a heap-based buffer overflow via a specially crafted, incorrectly formatted markdown file. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising...

CVE-2025-20947

Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access image files across multiple users. User interaction is required for triggering this vulnerability...

CVE-2025-32460

GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising eas...

CVE-2025-27469

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-3407

A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhwbuildtilesetfromimage. The manipulation of the argument hcount/vcount leads to out-of-bounds read. The attack can be launched remotely. This product takes...

CVE-2024-45551

Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass...

CVE-2025-28403

CVE-2025-28403 concerns RUoYi v4.8.0, where the private function/editSave allows a remote attacker to escalate privileges by modifying system configuration without validating the user’s administrative privileges. Attack vector is network-based; impact is described as high (confidentiality, integr...

CVE-2025-3296

creationtimestamp| type| source ---|---|--- 2025-04-05 08:37:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10601 2025-04-05 09:07:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lm2leadfyg2r 2025-04-05 11:34:35+00:00| seen|...

CVE-2025-30425

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, watchOS 11.4. A malicious website may be able to track users in Safari private browsing mode...

CVE-2025-21986

In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chain. The semaphore is acquired for writing when adding / removing...

CVE-2025-31183

The issue was addressed with improved restriction of data container access. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, tvOS 18.4, watchOS 11.4. An app may be able to access sensitive user data...