CVE-2025-8343

creationtimestamp| type| source ---|---|--- 2025-07-31 03:07:13+00:00| seen| https://bsky.app/profile/potato.software/post/3lva5s3lftf2n...

PT-2025-31515 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is related to Server-Side Request Forgery SSRF. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about ...

PT-2025-31516 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is due to unvalidated user input. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer versio...

CVE-2025-36609

creationtimestamp| type| source ---|---|--- 2025-07-30 21:06:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7jnpmglz2p...

CVE-2025-50578

creationtimestamp| type| source ---|---|--- 2025-07-30 17:22:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv7542hzfa2e 2025-07-31 06:01:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvahjpj4uq2h 2026-04-01 05:00:11+00:00| confirmed|...

CVE-2025-24854

creationtimestamp| type| source ---|---|--- 2025-07-30 17:07:24+00:00| seen| https://seclists.org/oss-sec/2025/q3/67 2025-07-30 19:37:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lv7ennm4bb2p 2025-07-31 11:00:36+00:00| seen|...

CVE-2025-53113 GLPI technicians can access unauthorized information through external links

GLPI, which stands for Gestionnaire Libre de Parc Informatique, is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. In versions 0.65 through 10.0.18, a technician can use the external links feature to fetch...

CVE-2025-1394

creationtimestamp| type| source ---|---|--- 2025-07-30 10:52:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv6hdojrd22z...

CVE-2025-8322

creationtimestamp| type| source ---|---|--- 2025-07-30 07:07:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv62qppgcw2l...

PT-2025-31462 · Netty · Netty

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The candidate was issued in error. Valid requests are issued via https://github.com/netty/netty. Recommendations: At the moment, there is no information about a newer version that contains a...

CVE-2025-52490

creationtimestamp| type| source ---|---|--- 2025-07-29 21:41:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv535c2s2c2d...

CVE-2025-53081

creationtimestamp| type| source ---|---|--- 2025-07-29 09:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3srwdb2n2h 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02...

CVE-2025-38480

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized data in insnrwemulatebits For Comedi INSNREAD and INSNWRITE instructions on "digital" subdevices subdevice types COMEDISUBDDI, COMEDISUBDDO, and COMEDISUBDDIO, it is common for the subdevice drive...

CVE-2025-53078

creationtimestamp| type| source ---|---|--- 2025-07-29 06:34:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lv3igsx2mk2b 2025-07-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-210-02 2025-07-29 20:05:33+00:00| seen|...

BELL-CVE-2025-38482

Bulletin has no description...

ROS-20250729-06

A vulnerability in FreeIPA's centralized user identity management system is related to improper access control. Exploitation of the vulnerability could allow an attacker acting remotely to escalate his privileges to the level of a domain administrator and impact the domain. remotely, escalate the...

GO-2025-3778 Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs

Gogs XSS allowed by stored call in PDF renderer in gogs.io/gogs...

CVE-2025-38487

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled Mitigate e.g. the following: echo 1e789080.lpc-snoop /sys/bus/platform/drivers/aspeed-lpc-snoop/unbind ... 120.363594 Unable to handle kernel NULL pointer...

CVE-2025-54528

In JetBrains TeamCity before 2025.07 a CSRF was possible in GitHub App connection flow...

CVE-2025-38493

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlatdumpstack We have observed kernel panics when using timerlat with stack saving, with the following dmesg output: memcpy: detected buffer overflow: 88 byte write of buffer size 0 WARNING: CPU:...