CVE-2025-8467

creationtimestamp| type| source ---|---|--- 2025-08-02 13:11:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvgahwdykp2e...

CVE-2025-6626

creationtimestamp| type| source ---|---|--- 2025-08-02 10:12:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvfwj44d6f2q...

CVE-2025-54574

creationtimestamp| type| source ---|---|--- 2025-08-02 03:01:24+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvf6fihpwq2d 2025-08-04 01:57:10+00:00| seen| https://bsky.app/profile/tamosan.bsky.social/post/3lvk3qikez62n 2025-08-04 16:27:18+00:00| seen|...

CVE-2025-54792

creationtimestamp| type| source ---|---|--- 2025-08-02 01:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvezya3zgc2d...

CVE-2025-6000

A privileged Vault operator within the root namespace with write permission to sys/audit may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23...

CVE-2025-49832

Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in asterisk/res/resstirshaken /verification.c that can be...

CVE-2023-32256

A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in multichannel connections could result in a use-after-free issue...

CVE-2025-41372

creationtimestamp| type| source ---|---|--- 2025-08-01 15:01:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdw6nih6i2a...

CVE-2025-7845

creationtimestamp| type| source ---|---|--- 2025-08-01 09:13:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvdcp4nl2z2c...

CVE-2025-50475

creationtimestamp| type| source ---|---|--- 2025-08-01 09:02:35+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvdc4geoho2k...

CVE-2025-8454

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts a collection of scripts to make the life of a Debian Package maintainer easier, skips OpenPGP verification if the upstream source is already downloaded from a previous run even...

CVE-2025-31716

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2025-5954

creationtimestamp| type| source ---|---|--- 2025-08-01 03:01:16+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvcnwe7kj22d 2025-08-10 17:27:27+00:00| seen| https://t.me/bhhub/1127 2025-08-10 17:27:27+00:00| seen| https://t.me/bhhub/866 2026-05-25 02:02:38+00:00| seen|...

PT-2025-31613 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The vulnerability is a memory corruption issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-48073

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in reduceMemory mode, it is possible to crash a target application with a...

CVE-2025-26062

creationtimestamp| type| source ---|---|--- 2025-07-31 20:02:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvbwj2tzva2z 2025-08-01 07:31:49+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvd524rvw42e...

WordPress Auteur Framework plugin <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Settings Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Settings Updates vulnerability discovered by Lucio Sá in WordPress Plugin Auteur Framework versions = 7.1...

libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...

CVE-2025-48074

creationtimestamp| type| source ---|---|--- 2025-07-31 15:11:06+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-x22w-82jp-8rvf 2025-08-01 19:07:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvedwm6nf32l...

CVE-2025-48073

creationtimestamp| type| source ---|---|--- 2025-07-31 15:10:03+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-qhpm-86v7-phmm 2025-08-01 00:02:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvcdwlpcda2c...