3531 matches found
CVE-2025-21913
In the Linux kernel, the following vulnerability has been resolved: x86/amdnb: Use rdmsrsafe in amdgetmmconfigrange Xen doesn't offer MSRFAM10HMMIOCONFBASE to all guests. This results in the following warning: unchecked MSR access error: RDMSR from 0xc0010058 at rIP: 0xffffffff8101d19f...
CVE-2025-21921 net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: netlink: Allow NULL nlattrs when getting a phydevice ethnlreqgetphydev is used to lookup a phydevice, in the case an ethtool netlink command targets a specific phydev within a netdev's topology. It takes as a...
CVE-2016-10011
creationtimestamp| type| source ---|---|--- 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/2961 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/10574...
CVE-2016-3115
creationtimestamp| type| source ---|---|--- 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/2961 2025-04-01 08:49:50+00:00| published-proof-of-concept| https://t.me/MalaysiaHacktivistz/10574...
CVE-2025-30827
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saleswonder Team: Tobias WP2LEADS wp2leads allows Reflected XSS.This issue affects WP2LEADS: from n/a through = 3.4.5...
CVE-2025-31191
creationtimestamp| type| source ---|---|--- 2025-04-01 03:35:14+00:00| seen| https://t.me/cvedetector/21683 2025-05-01 18:50:38+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lo4y37twut2t 2025-05-01 19:11:39+00:00| seen|...
CVE-2022-49742
In the Linux kernel, the following vulnerability has been resolved: f2fs: initialize locks earlier in f2fsfillsuper syzbot is reporting lockdep warning at f2fshandleerror 1, for spinlock&sbi-errorlock is called before spinlockinit is called. For safe locking in error handling, move initialization...
CVE-2025-29492
libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function...
CVE-2025-21885
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix the page details for the srq created by kernel consumers While using nvme target with usesrq on, below kernel panic is noticed. 549.698111 bnxten 0000:41:00.0 enp65s0np0: FEC autoneg off encoding: Clause 91...
CVE-2025-21871
In the Linux kernel, the following vulnerability has been resolved: tee: optee: Fix supplicant wait loop OP-TEE supplicant is a user-space daemon and it's possible for it be hung or crashed or killed in the middle of processing an OP-TEE RPC call. It becomes more complicated when there is incorre...
CVE-2025-2857
Firefox on Windows was vulnerable to a sandbox-escape in the IPC code where a compromised child process could cause the parent to return an unintentionally powerful handle. This pattern mirrors the Chrome/CVE-2025-2783 lineage and was exploited in the wild. The issue affected Firefox on Windows o...
Splunk Enterprise 9.1.0 < 9.1.8, 9.2.0 < 9.2.5, 9.3.0 < 9.3.3, 9.4.0 < 9.4.1 (SVD-2025-0305)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2025-0305 advisory. - In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and 9.1.8 and Splunk Cloud Platform versions below 9.3.2408.107,...
CVE-2025-2532 Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability
Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target must visit a malicio...
CVE-2025-2645
A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /product.php. The manipulation of the argument artname leads to cross site scripting. It is possible to launch the attack remotely. The...
CVE-2025-2723
creationtimestamp| type| source ---|---|--- 2025-03-25 01:24:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8578 2025-03-25 02:46:02+00:00| seen| https://t.me/cvedetector/21014...
CVE-2025-2186
creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtza7vvq2x 2025-03-22 14:00:34+00:00| seen| Telegram/1ETDR3cINztmrc4FfbKm5GJx5h-N5WBr3FoPGxl4NIHDSU 2025-03-22 17:03:54+00:00| seen| https://t.me/cvedetector/20875...
CVE-2023-28207
creationtimestamp| type| source ---|---|--- 2025-03-21 03:14:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkuandack526 2025-03-21 04:16:28+00:00| seen| https://t.me/cvedetector/20781 2025-03-21 16:19:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8370 2025-03-25...
CLSA-2025-1742474086 bind: Fix of CVE-2022-3094
CVE-2022-3094: fix resources exhaustion issue caused by flood of dynamic DNS updates...
CVE-2025-27777
Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery SSRF in modeldownload.py line 195 in 3.2.7. The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself ...