SUSE CVE-2025-71133

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdmanetevent irdmanetevent should not dereference anything from "neigh" alias "ptr" until it has checked that the event is NETEVENTNEIGHUPDATE. Other events come with different structures pointe...

GHSA-28CF-XVCF-HW6M

creationtimestamp| type| source ---|---|--- 2026-01-17 12:45:03+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mcmndtqqbw2s...

CVE-2026-0725

creationtimestamp| type| source ---|---|--- 2026-01-17 10:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcmffn5miz2v...

CVE-2025-14029

The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxadmineventapproval function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to approve arbitrary events via t...

CVE-2025-14029

CVE-2025-14029 affects the WordPress plugin Community Events (versions up to and including 1.5.6). The issue is a missing capability check in ajax_admin_event_approval(), allowing unauthenticated attackers to approve arbitrary events via the eventlist parameter. Wordfence notes this vulnerability...

CVE-2025-14029

The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxadmineventapproval function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to approve arbitrary events via t...

CVE-2025-14029 Community Events <= 1.5.6 - Missing Authorization to Unauthenticated Arbitrary Event Approval via 'eventlist' Parameter

The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxadmineventapproval function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to approve arbitrary events via t...

CVE-2026-0519

creationtimestamp| type| source ---|---|--- 2026-01-17 03:55:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclpr54gec2n...

CVE-2025-5489

creationtimestamp| type| source ---|---|--- 2026-01-17 01:23:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclhbf3snk2v...

GHSA-MQWM-5M85-GMCV

creationtimestamp| type| source ---|---|--- 2026-01-17 00:01:45+00:00| seen| Telegram/sMGKt34RKNBzAXYn1WiqoR4k9l2ZWd5Yu11MDdcwsZpHg...

PT-2026-3348

The Community Events plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax admin event approval function in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to approve arbitrary events vi...

CVE-2026-23725

creationtimestamp| type| source ---|---|--- 2026-01-16 23:30:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclaxrvryl2y...

CVE-2026-23726

creationtimestamp| type| source ---|---|--- 2026-01-16 23:26:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclaqe7hml2h...

CVE-2026-23729

creationtimestamp| type| source ---|---|--- 2026-01-16 23:23:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mclajsh2q42y...

CVE-2025-31510

creationtimestamp| type| source ---|---|--- 2026-01-16 19:10:51+00:00| seen| Telegram/vowXZbZwKnyiuZvILmJ3rnar2QNY3vaKo2OqMNcx6zJS1Q...

GHSA-PJJ5-F3WM-F9M8

creationtimestamp| type| source ---|---|--- 2026-01-16 18:08:53+00:00| seen| Telegram/I3-zFtaxViYXm9hfGR-UWotuHKxXoIhOFZR3YKeNWqfhCxo...

RDMA/irdma: avoid invalid read in irdma_net_event

...

CVE-2025-12957

creationtimestamp| type| source ---|---|--- 2026-01-16 07:43:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjlznzxoc2e 2026-01-16 12:14:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115904718084472700 2026-01-16 14:05:54+00:00| seen|...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004104 advisory. A race condition in perfeventopen allows local attackers to leak sensitive data from setuid programs. As no relevant locks in particular the credguardmutex are held...

MiracleLinux 7 : firefox-60.3.0-1.0.1.el7.AXS7 (AXSA:2018-3376:08)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-3376:08 advisory. Mozilla: Memory safety bugs fixed in Firefox 63 and Firefox ESR 60.3 CVE-2018-12390 Mozilla: Crash with nested event loops CVE-2018-12392 Mozilla:...