9703 matches found
CVE-2025-26906
creationtimestamp| type| source ---|---|--- 2025-04-16 13:55:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12042...
CVE-2025-22023
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Don't skip on Stopped - Length Invalid Up until commit d56b0b2ab142 "usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped" in v6.11, the driver didn't skip missed isochronous TDs when handling...
CVE-2025-22019
In the Linux kernel, the following vulnerability has been resolved: bcachefs: bch2ioctlsubvolumedestroy fixes bch2evictsubvolumeinodes was getting stuck - due to incorrectly pruning the dcache. Also, fix missing permissions checks...
CVE-2025-39602
Missing Authorization vulnerability in WC Product Table WooCommerce Product Table Lite wc-product-table-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WooCommerce Product Table Lite: from n/a through = 3.9.5...
CVE-2025-39572 WordPress Checkout for PayPal plugin <= 1.0.38 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Noor Alam Checkout for PayPal checkout-for-paypal allows Stored XSS.This issue affects Checkout for PayPal: from n/a through = 1.0.38...
CVE-2025-22019
In the Linux kernel, the following vulnerability has been resolved: bcachefs: bch2ioctlsubvolumedestroy fixes bch2evictsubvolumeinodes was getting stuck - due to incorrectly pruning the dcache. Also, fix missing permissions checks...
CVE-2025-3676
creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfuslm4i2l 2025-04-16 11:50:56+00:00| seen| https://t.me/cvedetector/23060...
CVE-2025-31363
creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfusbpuw2h 2025-04-16 13:31:35+00:00| seen| https://t.me/cvedetector/23080...
CVE-2025-24839
creationtimestamp| type| source ---|---|--- 2025-04-16 10:43:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmwfurl7k62v 2025-04-16 11:51:00+00:00| seen| https://t.me/cvedetector/23062...
CVE-2018-16606
creationtimestamp| type| source ---|---|--- 2025-04-16 09:30:26+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lmwbrptwnu2w 2025-04-17 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvxkyi42a...
GHSA-H99M-6755-RGWC
creationtimestamp| type| source ---|---|--- 2025-04-16 08:55:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11997 2025-04-16 13:03:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114347775337646077...
CVE-2025-3674
The CVE-2025-3674 entry concerns TOTOLINK A3700R (9.1.2u.5822_B20200513). The vulnerability affects the setUrlFilterRules function in /cgi-bin/cstecgi.cgi, causing improper access controls that can be exploited remotely. Public disclosure of the exploit is noted. The documents do not provide a co...
CVE-2024-58249
In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...
CVE-2025-30982
creationtimestamp| type| source ---|---|--- 2025-04-15 22:44:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmv5o3nida2g 2025-04-15 22:56:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11957 2025-04-16 01:49:01+00:00| seen| https://t.me/cvedetector/23028...
CVE-2025-31950
An unauthenticated attacker can obtain EV charger energy consumption information of other users...
CVE-2025-27927
An unauthenticated attackers can obtain a list of smart devices by knowing a valid username through an unprotected API...
CVE-2025-31933
An unauthenticated attacker can check the existence of usernames in the system by querying an API...
CVE-2025-30719
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...
CVE-2025-30689
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...