85720 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-38330
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test ctl cache KASAN reported out of...
Linux Distros Unpatched Vulnerability : CVE-2020-13143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gadgetdevdescUDCstore in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an...
CVE-2025-8521
creationtimestamp| type| source ---|---|--- 2025-08-04 22:16:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvm7uzgbvu2e...
CVE-2025-51541
creationtimestamp| type| source ---|---|--- 2025-08-04 20:22:03+00:00| seen| https://gist.github.com/anonx-hunter/a7ef32a01d7d888413b08bf8589fdd7e...
CVE-2025-51534
creationtimestamp| type| source ---|---|--- 2025-08-04 19:27:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlwgvjzxt2d...
Hackers Abuse Microsoft 365 Direct Send to Deliver Internal Phishing Emails
A new Proofpoint report reveals how attackers are using Microsoft 365's Direct Send and unsecured SMTP relays to…...
CVE-2025-51857
creationtimestamp| type| source ---|---|--- 2025-08-04 16:09:19+00:00| seen| https://gist.github.com/this1slwl/d714514635119159607c14faebbbcf20...
CVE-2025-6204
creationtimestamp| type| source ---|---|--- 2025-08-04 13:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvlaz2cj7l2z 2025-09-03 14:41:29+00:00| seen| https://bsky.app/profile/sansisc.bsky.social/post/3lxwugt5mhc2s 2025-09-23 12:03:28+00:00| confirmed|...
CVE-2025-6076
Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "reports" tab, allowing an authenticated attacker to upload a malicious file and compromise the device. By default, the software runs as SYSTEM, heightening the severity of the...
CVE-2025-50754: Improper Neutralization of Input During Web Page Generation
Unisite CMS version 5.0 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the...
PT-2025-31806
Name of the Vulnerable Software and Affected Versions IPX versions 1.3.1 and below IPX versions 2.0.0-0 through 2.1.0 IPX versions 3.0.0 through 3.1.0 Description IPX, an image optimizer powered by sharp and svgo, is susceptible to a path prefix bypass when verifying if a path is within allowed...
Linux Distros Unpatched Vulnerability : CVE-2025-38224
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: kvaserpciefd: refine error prone echoskbmax handling logic echoskbmax should define the...
CVE-2018-1049
creationtimestamp| type| source ---|---|--- 2025-08-03 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlb6dsia2h...
CVE-2025-8512
creationtimestamp| type| source ---|---|--- 2025-08-03 17:08:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvj675stpb2a...
CVE-2025-8504
creationtimestamp| type| source ---|---|--- 2025-08-03 11:07:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvik2gphrb2l...
CVE-2025-6000
creationtimestamp| type| source ---|---|--- 2025-08-02 07:31:39+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lvfniqwniw2u 2025-08-04 16:30:36+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lvlmk6ewnk2e 2025-08-07 01:58:03+00:00| seen|...
CVE-2025-6076
The Partner Software and Partner Web applications (versions 4.32 and previous ) are vulnerable to an arbitrary file upload flaw because they do not sanitize files uploaded on the "reports" tab. An authenticated attacker can exploit this to upload a malicious file and compromise the device; the ri...
OSV-2025-591 UNKNOWN READ in mov_read_header
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=435536867 Crash type: UNKNOWN READ Crash state: movreadheader avformatopeninput demuxopenlavf...