3457 matches found
Google Chrome Security Update (stable-channel-update-for-desktop_14-2025-05) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Intel Graphics Driver and Software Advisory - Lenovo Support US
No description provided...
CVE-2025-12347
creationtimestamp| type| source ---|---|--- 2025-05-07 15:48:27+00:00| seen| https://t.me/NinjaSec/299 2025-10-28 02:51:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m47wfld5ve2b...
CVE-2024-3446
creationtimestamp| type| source ---|---|--- 2025-05-02 23:17:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14626 2025-09-12 22:13:53+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lyobvxu5h22i...
CVE-2025-3301
creationtimestamp| type| source ---|---|--- 2025-04-29 14:11:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13808 2025-04-29 15:08:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114421879796256063 2025-04-29 15:50:20+00:00| seen|...
CheatAgent: Attacking LLM-Empowered Recommender Systems Via LLM Agent
Recently, Large Language Model LLM-empowered recommender systems RecSys have brought significant advances in personalized user experience and have attracted considerable attention. Despite the impressive progress, the research question regarding the safety vulnerability of LLM-empowered RecSys...
CVE-2025-43949
creationtimestamp| type| source ---|---|--- 2025-04-22 21:09:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln2jn4f2d 2025-04-22 22:35:24+00:00| seen| https://t.me/cvedetector/23547 2025-04-23 15:48:35+00:00| seen|...
XSS in the /files Endpoint of the Generic REST API
Impact The input parameter, which consists of a file path and name, can be manipulated to return the Content-Type header with text/html if the name part ends with .html. This could allow malicious JavaScript code to be executed in the browser. For a successful attack, a malicious file needs to be...
SUSE CVE-2025-40364
In the Linux kernel, the following vulnerability has been resolved: iouring: fix ioreqprepasync with provided buffers ioreqprepasync can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed...
CGA-8469-R63W-M2C8
Bulletin has no description...
DEBIAN-CVE-2025-40364
In the Linux kernel, the following vulnerability has been resolved: iouring: fix ioreqprepasync with provided buffers ioreqprepasync can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed...
UBUNTU-CVE-2025-40364
In the Linux kernel, the following vulnerability has been resolved: iouring: fix ioreqprepasync with provided buffers ioreqprepasync can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed...
CVE-2024-12530
creationtimestamp| type| source ---|---|--- 2025-04-17 17:28:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114354482967202522...
Dell ECS 输入验证错误漏洞
Dell ECS is an enterprise-class object storage solution from Dell Technologies. Dell ECS suffers from an input validation error vulnerability that stems from the system failing to properly process specific inputs. No details of the vulnerability are provided at this time...
ejabberd -- mod_muc_occupantid: Fix handling multiple occupant-id
ejabberd team reports: Fixed issue with handling of user provided occupant-id in messages and presences sent to muc room. Server was replacing just first instance of occupant-id with its own version, leaving other ones untouched. That would mean that depending on order in which clients send...
CVE-2025-31932
Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrary code is executed on the Management Console. The vendor provides the workaround information and recommends to apply it to the deployment environment...
Multi-Vendor BIOS Security Vulnerabilities (April 2025) - Lenovo Support US
No description provided...
Adobe Framemaker 缓冲区错误漏洞
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A buffer overflow vulnerability exists in Adobe Framemaker that originates from an out-of-bounds read, and no...
SUSE CVE-2025-30223
Beego is an open-source web framework for the Go programming language. Prior to 2.3.6, a Cross-Site Scripting XSS vulnerability exists in Beego's RenderForm function due to improper HTML escaping of user-controlled data. This vulnerability allows attackers to inject malicious JavaScript code that...