CVE-2025-54410

A firewall state management issue was found in the Moby project. When firewalld reloads, Docker fails to recreate iptables rules that isolate bridge networks, allowing any container to access all ports on any other container across different bridge networks on the same host. This issue breaks...

CVE-2025-54352

A flaw was found in WordPress, which allows remote attackers to enumerate private and draft post titles by sending pingback requests via XML-RPC. This information disclosure occurs because the system does not adequately protect these post titles from external access. An attacker can achieve this...

CVE-2025-46570

A timing discrepancy flaw was found in vLLM, where a prefix match on a user prompt can reveal other user prompts. An attacker must have user-level access to the vLLM instance to exploit this vulnerabi Mitigation Mitigation for this issue is either not available or the currently available options ...