689 matches found
CVE-2025-32834
creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01...
CVE-2025-43961
In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser...
CVE-2025-32442 Fastify vulnerable to invalid content-type parsing, which could lead to validation bypass
Fastify is a fast and low overhead web framework, for Node.js. In versions 5.0.0 to 5.3.0 as well as version 4.29.0, applications that specify different validation strategies for different content types have a possibility to bypass validation by providing a slightly altered content type such as...
CVE-2025-38479
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: free irq correctly in remove path Add fsledma-txirq/errirq check to avoid below warning because no errirq at i.MX9 platform. Otherwise there will be kernel dump: WARNING: CPU: 0 PID: 11 at...
CVE-2025-22774 WordPress CRUDLab Scroll to Top Plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CRUDLab CRUDLab Scroll to Top crudlab-scroll-to-top allows Reflected XSS.This issue affects CRUDLab Scroll to Top: from n/a through = 1.0.1...
CVE-2024-58096
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and ath11kdpfullmonprocessrx, they use ath11khalsrng for many times but...
Important: Red Hat Security Advisory: webkit2gtk3 security update
An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
CVE-2025-32870
creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxaptals42v 2025-04-16 20:48:39+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349606118111826 2025-04-16 21:54:57+00:00| seen|...
CVE-2025-23137 cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update
In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in amdpstateupdate Check if policy is NULL before dereferencing it in amdpstateupdate...
CVE-2025-22115
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfscreatependingblockgroups Block group creation is done in two phases, which results in a slightly unintuitive property: a block group can be allocated/deallocated from after...
CVE-2025-22104
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...
CVE-2025-30735
...
CVE-2025-3608
creationtimestamp| type| source ---|---|--- 2025-04-15 14:11:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114342381621851193 2025-04-15 16:38:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatd6mw2h 2025-04-15 17:26:39+00:00| seen| https://t.me/cvedetector/229...
CVE-2024-10087
creationtimestamp| type| source ---|---|--- 2025-04-14 12:33:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl33oaw62l 2025-04-14 12:54:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11600 2025-04-14 12:54:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11602...
CVE-2025-32908
A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service DoS. Mitigation Currently, no mitigation was found for this vulnerability...
CVE-2025-2814
Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. This issue affects operating systems where "/dev/urandom'" is unavailable. In that case, Crypt::CBC will fallback to u...
CVE-2025-32654
creationtimestamp| type| source ---|---|--- 2025-04-11 08:50:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11394 2025-04-11 11:37:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmjwkt3lzz24 2025-04-11 11:48:43+00:00| seen|...
CVE-2025-32656
creationtimestamp| type| source ---|---|--- 2025-04-11 08:50:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11393 2025-04-11 11:37:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmjwksqqb22q 2025-04-11 11:48:44+00:00| seen|...
CVE-2025-32260 WordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in Detheme DethemeKit For Elementor. This issue affects DethemeKit For Elementor: from n/a through 2.1.10...