CVE-2025-37918

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skbdequeue A NULL pointer dereference can occur in skbdequeue when processing a QCA firmware crash dump on WCN7851 0489:e0f3. 93.672166 Bluetooth: hci0: ACL memdump size589824...

CVE-2025-37912

In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in icevcaddfdirfltr As mentioned in the commit baeb705fd6a7 "ice: always check VF VSI pointer values", we need to perform a null pointer check on the return value of icegetvfvsi before using it...

CVE-2025-37961

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in dooutputroute4 syzbot reports for uninit-value for the saddr argument 1. commit 4754957f04f5 "ipvs: do not use random local source address for tunnels" already implies that the input value of...

CVE-2025-37909

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the skb to the LS descriptor. Previously skb was mapped to EXT descriptor when the number of fragments is zero with GSO enabled. Mapping the skb to EXT descriptor preven...

CVE-2025-37938

In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. I...

CVE-2025-37935

creationtimestamp| type| source ---|---|--- 2025-05-20 15:40:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16998...

CVE-2025-37936

creationtimestamp| type| source ---|---|--- 2025-05-20 15:40:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16997...

CVE-2024-53359

creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerrb4vh2n...

CVE-2025-45862

creationtimestamp| type| source ---|---|--- 2025-05-20 15:13:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpmerozy2w2h...

CVE-2024-44962

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16985 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-54779

creationtimestamp| type| source ---|---|--- 2025-05-20 14:40:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16983...

CVE-2025-40635

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16977 2025-05-20 15:06:05+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpme74kp4vy2...

GHSA-3HW7-QJ9H-R835

creationtimestamp| type| source ---|---|--- 2025-05-20 13:40:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16973...

Security update for glib2

This update for glib2 fixes the following issues: CVE-2025-3360: Fixed integer overflow and buffer underread when parsing a very long and invalid ISO 8601 timestamp with gdatetimenewfromiso8601 bsc1240897 Patch Instructions: To install this SUSE update use the SUSE recommended installation method...

CVE-2025-47646

creationtimestamp| type| source ---|---|--- 2025-05-20 10:11:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/37480 2025-05-20 10:28:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/37485 2025-05-23 15:44:34+00:00| seen|...

CVE-2025-36535

creationtimestamp| type| source ---|---|--- 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-09 2025-05-21 18:06:37+00:00| exploited| https://t.me/informationsecuritychannel/53587 2025-05-21 20:08:47+00:00| seen|...

CVE-2025-41426

creationtimestamp| type| source ---|---|--- 2025-05-20 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-140-10 2025-05-21 15:59:20+00:00| seen| https://bsky.app/profile/nihonmatsu.bsky.social/post/3lpoxtdwsnc26 2025-05-21 15:59:20+00:00| seen|...

CVE-2025-4322

creationtimestamp| type| source ---|---|--- 2025-05-20 06:39:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16954 2025-05-20 07:18:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lplkbh22a52k 2025-05-20 23:56:44+00:00| seen|...

CVE-2025-2929

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-2929 Order Delivery Date Pro for WooCommerce < 12.4.0 - Reflected XSS

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...