CVE-2024-37993

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT 6GT2811-6BC10-2AA0 All versions V4.2, SIMATIC Reader RF610R ETSI 6GT2811-6BC10-0AA0 All versions V4.2, SIMATIC Reader RF610R FCC 6GT2811-6BC10-1AA0 All versions V4.2, SIMATIC Reader RF615R CMIIT 6GT2811-6CC10-2AA0 All versions V4....

CVE-2024-7422

The Theme My Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.1.7. This is due to missing or incorrect nonce validation on the tmladminsavemssettings function. This makes it possible for unauthenticated attackers to update the theme's...

CVE-2024-29967

In Brocade SANnav before Brocade SANnav v2.31 and v2.3.0a, it was observed that Docker instances inside the appliance have insecure mount points, allowing reading and writing access to sensitive files. The vulnerability could allow a sudo privileged user on the host OS to read and write access to...

CVE-2024-45102

A privilege escalation vulnerability was discovered that could allow a valid, authenticated LXCA user to escalate their permissions for a connected XCC instance when using LXCA as a Single Sign On SSO provider for XCC instances...

CVE-2022-3513

An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. A specially crafted payload could lead to a reflected XSS on the client side which allows attackers to...

CVE-2022-3573

An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. Due to the improper filtering of query parameters in the wiki changes page, an attacker can execute...

CVE-2022-3870

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.0 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions starting from 15.7 before 15.7.2. GitLab allows unauthenticated users to download user avatars using the victim's user ID, on private...

CVE-2021-43850

Discourse is an open source platform for community discussion. In affected versions admins users can trigger a Denial of Service attack via the /message-bus/diagnostics path. The impact of this vulnerability is greater on multisite Discourse instances where multiple forums are served from a singl...

CVE-2020-5864

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default...

CVE-2019-13175

Read the Docs before 3.5.1 has an Open Redirect if certain user-defined redirects are used. This affects private instances of Read the Docs in addition to the public readthedocs.org web sites...

CVE-2025-4873

creationtimestamp| type| source ---|---|--- 2025-05-18 12:53:15+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lph3y7qq2xp2 2025-05-18 13:08:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lph4vekhlx24...

CVE-2025-4839

creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszq7t67n2 2025-05-18 01:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvpqax22t 2025-05-19...

CVE-2025-40577

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16098 2025-05-13 10:48:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cmzo5rjk2 2025-05-13 10:52:38+00:00| seen|...

CVE-2025-24132

creationtimestamp| type| source ---|---|--- 2025-04-29 14:21:44+00:00| seen| https://bsky.app/profile/dysternis.bsky.social/post/3lnxi4jp6lc2g 2025-04-29 22:16:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/34679 2025-04-29 22:33:24+00:00| published-proof-of-concept|...

CVE-2025-3915

creationtimestamp| type| source ---|---|--- 2025-04-26 06:08:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13567 2025-04-26 06:12:53+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnp3eesuwja2 2025-04-26 07:39:17+00:00| seen|...

CVE-2025-32432

creationtimestamp| type| source ---|---|--- 2025-04-25 15:45:50+00:00| seen| https://bsky.app/profile/onyphe.io/post/3lnnkxcegak22 2025-04-25 16:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114399621496612469 2025-04-25 18:02:30+00:00| seen|...

CVE-2025-46535

creationtimestamp| type| source ---|---|--- 2025-04-25 09:07:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13395 2025-04-25 09:20:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnmvfyg7zs2b 2025-04-25 10:44:57+00:00| seen|...

CVE-2025-3404

creationtimestamp| type| source ---|---|--- 2025-04-19 08:02:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12577 2025-04-19 08:39:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln5qctubwh2h 2025-04-19 09:02:35+00:00| seen|...

CVE-2025-3246

creationtimestamp| type| source ---|---|--- 2025-04-17 22:58:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12373 2025-04-18 02:53:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6qwik2d 2025-04-18 03:12:05+00:00| seen| https://t.me/cvedetector/23291 2025-04-22...

RHEL 6 : openstack-nova (RHSA-2014:0366)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0366 advisory. OpenStack Compute nova launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform...