9437 matches found
CVE-2025-54798 tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter
tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4...
CVE-2025-54882 Himmelblau's Kerberos credential cache collection is world readable
Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...
CVE-2025-45765
ruby-jwt v3.0.0.beta1 was discovered to contain weak encryption. NOTE: the Supplier's perspective is "keysize is not something that is enforced by this library. Currently more recent versions of OpenSSL are enforcing some key sizes and those restrictions apply to the users of this gem also."...
CVE-2025-55138
CVE-2025-55138 concerns LinkJoin versions through 882f196, where the password-reset flow mishandles token ownership. This is a network-accessible issue with high impact on confidentiality and integrity (CVSS 7.4, HIGH). Connected sources identify the root cause as improper token ownership handlin...
CVE-2025-6634
creationtimestamp| type| source ---|---|--- 2025-08-06 23:55:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvrgduxvp42z...
CVE-2025-47906
creationtimestamp| type| source ---|---|--- 2025-08-06 19:31:56+00:00| seen| https://bsky.app/profile/golang.org/post/3lvqxmfabea2s 2025-08-06 21:01:24+00:00| seen| https://seclists.org/oss-sec/2025/q3/77 2025-08-06 23:28:22+00:00| seen|...
CVE-2025-51308
creationtimestamp| type| source ---|---|--- 2025-08-06 18:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvqt42nspt2s...
CVE-2025-52496
creationtimestamp| type| source ---|---|--- 2025-08-06 13:54:19+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-08-14 11:44:20+00:00| seen| MISP/1413a78e-c0b3-4092-97e7-909fb9773448 2025-11-09 15:05:00+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m57eyhaklc...
CVE-2025-46389
CWE-620: Unverified Password Change...
CVE-2025-27072
Information disclosure while processing a packet at EAVB BE side with invalid header length...
CVE-2025-21474
Memory corruption while processing commands from A2dp sink command queue...
CVE-2025-21474
CVE-2025-21474 describes a memory corruption issue in Qualcomm chipsets triggered while processing commands from the A2dp sink command queue. The root cause is related to memory handling during queue processing, with the CVSSv3.1 base metrics indicating HIGH impact on confidentiality, integrity, ...
CVE-2025-21019
creationtimestamp| type| source ---|---|--- 2025-08-06 07:08:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvpo3kbwcm2d...
CVE-2025-21022
CVE-2025-21022 affects Samsung Galaxy Wearable prior to 2.2.63.25042861. The issue is improper access control that could allow a local attacker to access sensitive information. Affected component is Galaxy Wearable software; root cause is access-control weakness. Mitigation seen in PT-2025-32113 ...
CVE-2025-21021
Summary: CVE-2025-21021 describes an out-of-bounds write in the drawing pinpad of Samsung’s Blockchain Keystore. Affected component: Blockchain Keystore (drawing pinpad) prior to version 1.3.17.2. Root cause / vulnerability: out-of-bounds memory write, enabling a local privileged attacker to writ...
CVE-2025-21012
CVE-2025-21012 - Galaxy Watch fall detection : Affected product is Samsung Galaxy Watch; vulnerability is an improper access control in the fall-detection feature, allowing a local attacker to modify the configuration before the SMR Aug-2025 Release 1. Root cause: inadequate authorization for loc...
CVE-2025-8613
creationtimestamp| type| source ---|---|--- 2025-08-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-805/ 2025-09-02 23:21:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvazgzilv27...
CVE-2025-54645
Out-of-bounds array access issue due to insufficient data verification in the location service module. Impact: Successful exploitation of this vulnerability may affect availability...