27434 matches found
CVE-2025-40021 tracing: dynevent: Add a missing lockdown check on dynevent
In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamicevents interface on tracefs is compatible with kprobeevents and uprobeevents, it should also check the lockdown status and reject if it is set...
CVE-2025-40021 tracing: dynevent: Add a missing lockdown check on dynevent
In the Linux kernel, the following vulnerability has been resolved: tracing: dynevent: Add a missing lockdown check on dynevent Since dynamicevents interface on tracefs is compatible with kprobeevents and uprobeevents, it should also check the lockdown status and reject if it is set...
CVE-2025-12134 ZoloBlocks <= 2.3.11 - Missing Authorization to Unauthenticated Popup Enable/Disable
The ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the updatepopupstatus function in all versions up to, and including, 2.3.11. This...
CVE-2025-62829
creationtimestamp| type| source ---|---|--- 2025-10-24 07:07:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3wctl5vdx2e...
CVE-2025-10723
creationtimestamp| type| source ---|---|--- 2025-10-24 06:44:31+00:00| seen| Telegram/mRanfqS7LnFTP97JXSrTkZwd-aDefqTtO4YUqld7AbeaT4...
CVE-2025-9158
creationtimestamp| type| source ---|---|--- 2025-10-24 06:44:27+00:00| seen| Telegram/DyW9C-iRL7RCoJBBvYjfTrdOzVYZ14zgoFKT-36CiR4jXIc...
spi: fsi: Implement a timeout for polling status
...
CVE-2025-54966
An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information...
PT-2025-43605
Name of the Vulnerable Software and Affected Versions ZoloBlocks – Gutenberg Block Editor Plugin versions prior to 2.3.12 Description The ZoloBlocks – Gutenberg Block Editor Plugin for WordPress has a flaw that allows unauthorized modification of data. Specifically, a missing capability check...
CVE-2025-12100
creationtimestamp| type| source ---|---|--- 2025-10-23 22:05:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3velahnsv2o...
EUVD-2025-35710
An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information...
CVE-2025-54966
An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information...
CVE-2025-54966
An issue was discovered in BAE SOCET GXP before 4.6.0.2. Some endpoints on the SOCET GXP Job Status Service may return sensitive information in certain situations, including local file paths and SOCET GXP version information...
CVE-2025-60216
creationtimestamp| type| source ---|---|--- 2025-10-23 17:41:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3uvsbqdzn2o...
USN-7838-1 fetchmail vulnerability
It was discovered that the fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this issue to cause fetchmail to crash, resulting in a denial of service...
USN-7838-1: fetchmail vulnerability
It was discovered that the fetchmail SMTP client incorrectly handled certain status code messages. An attacker controlling a malicious server could possibly use this issue to cause fetchmail to crash, resulting in a denial of service...
GHSA-2RRC-F24F-94F6
creationtimestamp| type| source ---|---|--- 2025-10-23 16:27:22+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115424417623809144...
GO-2025-3985 kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp
kcp is missing update validation allows arbitrary LogicalCluster status patches through initializingworkspaces Virtual Workspace in github.com/kcp-dev/kcp...
CVE-2025-49957
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products email-attachment-by-order-status-products allows Reflected XSS.This issue affects Email Attachment by Order Status &...