CVE-2025-30408

creationtimestamp| type| source ---|---|--- 2025-04-24 14:05:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13233 2025-04-24 14:09:03+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114393333303430166 2025-04-24 14:17:11+00:00| seen|...

USN-7455-2 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities

Jann Horn discovered that the watchqueue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service system crash or escalate their privileges. CVE-2022-0995 Several security issues were discovered i...

libxml2-2-2.13.8-1.1 on GA media (moderate)

libxml2-2-2.13.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15019-1 Rating: moderate Cross-References: CVE-2025-32414 CVE-2025-32415 CVSS scores: CVE-2025-32414 SUSE : 5.6 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L CVE-2025-32414 SUSE : 2.1...

libsoup-2_4-1-2.74.3-8.1 on GA media (moderate)

libsoup-24-1-2.74.3-8.1 on GA media Announcement ID: openSUSE-SU-2025:15018-1 Rating: moderate Cross-References: CVE-2025-2784 CVE-2025-32050 CVE-2025-32052 CVE-2025-32053 CVSS scores: CVE-2025-2784 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-2784 SUSE : 8.3...

govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media (moderate)

govulncheck-vulndb-0.0.20250422T181640-1.1 on GA media Announcement ID: openSUSE-SU-2025:15017-1 Rating: moderate Cross-References: CVE-2019-15119 CVE-2025-1386 CVE-2025-2424 CVE-2025-24358 CVE-2025-2475 CVE-2025-24839 CVE-2025-24866 CVE-2025-2564 CVE-2025-27538 CVE-2025-27571 CVE-2025-27936...

PT-2025-17852 · Hcl · Hcl Leap

Name of the Vulnerable Software and Affected Versions: HCL Leap affected versions not specified Description: The issue is related to improper sanitization of SVG files, which allows client-side script injection in deployed applications. This can potentially lead to security breaches...

Ubuntu: Security Advisory (USN-7451-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-17635

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: Improper Isolation or Compartmentalization in the stream cache mechanism for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege v...

GO-2025-3630 GoBGP does not properly check the input length in github.com/osrg/gobgp

GoBGP does not properly check the input length in github.com/osrg/gobgp...

GO-2025-3604 Mattermost Fails to Enforce Proper Access Controls on `/api/v4/audits` Endpoint in github.com/mattermost/mattermost-server

Mattermost Fails to Enforce Proper Access Controls on /api/v4/audits Endpoint in github.com/mattermost/mattermost-server...

CVE-2025-1951

creationtimestamp| type| source ---|---|--- 2025-04-22 15:03:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12866 2025-04-22 15:52:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114382415652361250 2025-04-22 15:56:49+00:00| seen|...

Memory release followed by re-exploitation vulnerability in several Apple products

visionOS is an AR eyewear system announced by Apple on June 6, 2023 at the 2023 Apple Worldwide Developers Conference, which will be featured for the first time in the Apple Vision Pro. tvOS is an iOS-based television operating system developed by Apple. watchOS is a set of watch operating system...

kissin977.com Cross Site Scripting vulnerability OBB-4047813

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

RHEL 8 : kernel-rt (RHSA-2025:3894)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3894 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

RHEL 8 / 9 : java-17-openjdk (RHSA-2025:3852)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3852 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security...

Fedora: Security Advisory (FEDORA-2025-e923d51676)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: webkitgtk-2.48.1-2.fc40

WebKitGTK is the port of the WebKit web rendering engine to the GTK platform...

ffmpeg-6-6.1.2-3.1 on GA media (moderate)

ffmpeg-6-6.1.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15010-1 Rating: moderate Cross-References: CVE-2023-22656 CVE-2023-45221 CVE-2023-47169 CVE-2023-47282 CVE-2023-48368 CVE-2023-51793 CVE-2023-51798 CVE-2024-12361 CVE-2024-35365 CVE-2024-35368 CVE-2025-0518 CVE-2025-22919...

[slackware-security] libxml2

New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libxml2-2.11.9-i586-3slack15.0.txz: Rebuilt. This update fixes security issues: schemas: Fix heap buffer overflow in...