CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

31906 matches found

osv_cve•added 2025/10/06 2:48 p.m.•12 views

CVE-2025-49594 XWiki OIDC Authenticator vulnerable to creation of token for any user with just `view` right

XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows...

9.2CVSS6.8AI score

SaveExploits0References7

osv_rlsa•added 2025/10/06 1:38 p.m.•17 views

RLSA-2025:16920 Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: nfsd: don't ignore the return code of svcprocregister CVE-2025-22026 kernel: netsched: hfsc: Fix a UAF vulnerability in class...

7.5CVSS7AI score0.00225EPSS

SaveExploits0References5

The Hacker News•added 2025/10/06 6:01 a.m.•22 views

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

A now patched security vulnerability in Zimbra Collaboration was exploited as a zero-day earlier this year in cyber attacks targeting the Brazilian military. Tracked as CVE-2025-27915 CVSS score: 5.4, the vulnerability is a stored cross-site scripting XSS vulnerability in the Classic Web Client...

5.4CVSS6.8AI score0.04064EPSS

SaveExploits2

Android Security Bulletins•added 2025/10/06 12:00 a.m.•34 views

Android Security Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2025-10-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Within 48 hours afte...

6.5AI score

SaveExploits0

Android Security Bulletins•added 2025/10/06 12:00 a.m.•45 views

Android Automotive OS Update Bulletin—October 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2025-10-05 or later from the October 2025 Android Security Bulletin in addition to all issues in thi...

7.8AI score

SaveExploits0

SUSE CVE•added 2025/10/05 2:56 a.m.•13 views

SUSE CVE-2023-53572

In the Linux kernel, the following vulnerability has been resolved: clk: imx: scu: use safe list iterator to avoid a use after free This loop is freeing "clk" so it needs to use listforeachentrysafe. Otherwise it dereferences a freed variable to get the next item on the loop...

5.5CVSS6.4AI score0.00141EPSS

SaveExploits0References19

NVD•added 2025/10/04 4:15 p.m.•26 views

CVE-2023-53535

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: Add a check for oversized packets Occasionnaly we may get oversized packets from the hardware which exceed the nomimal 2KiB buffer size we allocate SKBs with. Add an early check which drops the packet to avoid...

7.1CVSS0.0023EPSS

SaveExploits0References8

Debian CVE•added 2025/10/04 3:44 p.m.•8 views

CVE-2023-53611

In the Linux kernel, the following vulnerability has been resolved: ipmisi: fix a memleak in trysmiinit Kmemleak reported the following leak info in trysmiinit: unreferenced object 0xffff00018ecf9400 size 1024: comm "modprobe", pid 2707763, jiffies 4300851415 age 773.308s backtrace:...

5.5CVSS5.9AI score0.00145EPSS

SaveExploits0