CVE-2025-2361 Mercurial SCM Web Interface cross site scripting

A vulnerability was found in Mercurial SCM 4.5.3/71.19.145.211. It has been declared as problematic. This vulnerability affects unknown code of the component Web Interface. The manipulation of the argument cmd leads to cross site scripting. The attack can be initiated remotely. The exploit has be...

CVE-2024-54546

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-20145 Cisco IOS XR Software Access Control List Bypass Vulnerability

A vulnerability in the access control list ACL processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress...

CVE-2025-21854

In the Linux kernel, the following vulnerability has been resolved: sockmap, vsock: For connectible sockets allow only connected sockmap expects all vsocks to have a transport assigned, which is expressed in vsockproto::psockupdateskprot. However, there is an edge case where an unconnected...

CVE-2024-44192

The issue was addressed with improved checks. This issue is fixed in Safari 18, iOS 18 and iPadOS 18, macOS Sequoia 15, tvOS 18, visionOS 2, watchOS 11. Processing maliciously crafted web content may lead to an unexpected process crash...

CVE-2024-54469

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. A local user may be able to leak sensitive user information...

CVE-2024-54546

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2025-1362

creationtimestamp| type| source ---|---|--- 2025-03-09 06:38:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6958 2025-03-09 06:55:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljwhfyqdyk2k 2025-03-09 09:35:12+00:00| seen| https://t.me/cvedetector/19917 2025-03-09...

CVE-2025-26643

The UI performs the wrong action in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-25333

An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-21802 net: hns3: fix oops when unload drivers paralleling

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling When unload hclge driver, it tries to disable sriov first for each aedev node from hnae3aedevlist. If user unloads hns3 driver at the time, because it removes all the aedev node...

CVE-2022-49712

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: lpc32xxudc: Fix refcount leak in lpc32xxudcprobe ofparsephandle returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-49299

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: gadget: don't reset gadget's driver-bus UDC driver should not touch gadget's driver internals, especially it should not reset driver-bus. This wasn't harmful so far, but since commit fc274c1e9973 "USB: gadget: Add a ne...

CVE-2022-49441

In the Linux kernel, the following vulnerability has been resolved: tty: fix deadlock caused by calling printk under ttyport-lock ptywrite invokes kmalloc which may invoke a normal printk to print failure message. This can cause a deadlock in the scenario reported by syz-bot below: CPU0 CPU1 CPU2...

CVE-2022-49380

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid f2fsbugon in decvalidnodecount As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215897 I have encountered a bug in F2FS file system in kernel v5.17. The kernel should enable...

CVE-2022-49429

In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Prevent panic when SDMA is disabled If the hfi1 module is loaded with HFI1CAPSDMA off, a call to hfi1writeiter will dereference a NULL pointer and panic. A typical stack frame is: sdmaselectuserengine hfi1...

CVE-2025-26905

CVE-2025-26905 in the Estatik Real Estate Plugin (

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553, kpatch-patch-4_18_0-553_16_1, and kpatch-patch-4_18_0-553_30_1 security update

An update for kpatch-patch-4180-553, kpatch-patch-4180-553161, and kpatch-patch-4180-553301 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives ...

CVE-2025-23788

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzogozj24 2025-02-14 14:53:49+00:00| seen| https://infosec.exchange/users/cve/statuses/114002809904745325 2025-02-14 15:45:50+00:00| seen|...

CVE-2025-23751

creationtimestamp| type| source ---|---|--- 2025-02-14 13:17:18+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3li5bzauzqo2a 2025-02-14 14:38:48+00:00| seen| https://infosec.exchange/users/cve/statuses/114002750847666451 2025-08-25 18:31:44+00:00| seen|...