CVE-2025-4478

A flaw was found in the FreeRDP used by Anaconda's remote install feature, where a crafted RDP packet could trigger a segmentation fault. This issue causes the service to crash and remain defunct, resulting in a denial of service. It occurs pre-boot and is likely due to a NULL pointer dereference...

CVE-2025-37890

In the Linux kernel, the following vulnerability has been resolved: netsched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc As described in Gerrard's report 1, we have a UAF case when an hfsc class has a netem child qdisc. The crux of the issue is that hfsc is assuming that...

CVE-2025-40907

FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library. The included FastCGI library is affected by CVE-2025-23016, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC...

CVE-2025-46801

creationtimestamp| type| source ---|---|--- 2025-05-16 06:48:11+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3lpbgp7tlwk23 2025-05-19 07:38:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16814 2025-05-19 09:13:46+00:00| seen|...

CVE-2025-1531

creationtimestamp| type| source ---|---|--- 2025-05-16 06:34:15+00:00| seen| https://bsky.app/profile/potato.software/post/3lpbfwd2nd224 2025-05-16 06:35:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16634 2025-05-16 09:03:09+00:00| seen|...

CVE-2025-47809

creationtimestamp| type| source ---|---|--- 2025-05-16 01:34:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16595 2025-05-16 02:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpaypftjsr2o 2025-08-14 10:00:00+00:00| seen|...

CVE-2024-39134 affecting package zziplib for versions less than 0.13.74-1

CVE-2024-39134 affecting package zziplib for versions less than 0.13.74-1. A patched version of the package is available...

CVE-2025-47928

Spotipy is a Python library for the Spotify Web API. As of commit 4f5759dbfb4506c7b6280572a4db1aabc1ac778d, using pullrequesttarget on .github/workflows/integrationtests.yml followed by the checking out the head.sha of a forked PR can be exploited by attackers, since untrusted code can be execute...

BELL-CVE-2025-20012

Bulletin has no description...

CVE-2025-3917

creationtimestamp| type| source ---|---|--- 2025-05-15 04:42:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp6p7tgsv22e 2025-05-15 14:35:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16514...

CVE-2025-3909

Thunderbird's handling of the X-Mozilla-External-Attachment-URL header can be exploited to execute JavaScript in the file:/// context. By crafting a nested email attachment message/rfc822 and setting its content type to application/pdf, Thunderbird may incorrectly render it as HTML when opened,...

CVE-2025-47292

Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175bdaf2be0b8102dd198, the DebateAlternateArgumentsResolver deserializes a Cursor, allowing any classes and which can be controlled by unauthenticated user. Exploitation of this...

PT-2025-21915 · V-Sft · V-Sft

Name of the Vulnerable Software and Affected Versions: V-SFT versions 6.2.5.0 and earlier Description: The issue is related to an out-of-bounds write in the VS6MemInIF!set temp type default function. Opening specially crafted V7 or V8 files may lead to a crash, information disclosure, and arbitra...

CVE-2025-299777

creationtimestamp| type| source ---|---|--- 2025-05-13 16:58:56+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0155...

CVE-2025-30384

creationtimestamp| type| source ---|---|--- 2025-05-13 16:27:02+00:00| seen| https://www.thezdi.com/blog/2025/5/13/the-may-2025-security-update-review 2025-05-13 20:31:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16232...

CVE-2025-40578

A vulnerability has been identified in SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions. Affected devices do not properly handle multiple incoming Profinet packets received in rapid succession. An unauthenticated remote attacker can exploit this flaw by sending multiple packets in a very short ti...

CVE-2025-31929

Siemens VersiCharge AC Series EV Chargers (M0 firmware) are affected by CVE-2025-31929. Affected devices lack an Immutable Root of Trust in M0 hardware, allowing an attacker with physical access to potentially execute arbitrary code. The vulnerability is driven by the absence of trusted boot/root...

CVE-2025-31234

creationtimestamp| type| source ---|---|--- 2025-05-13 05:56:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114498979024635606 2026-04-02 22:17:20+00:00| seen| Telegram/uS-LGheIl2lIO3kT7MFmdoi3VL-1CYgYB6CRF5I8i3PT0...

Huawei EulerOS: Security Advisory for ghostscript (EulerOS-SA-2025-1510)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-20709 · Schweitzer Engineering Laboratories · Sel-5037 Sel Grid Configurator

Name of the Vulnerable Software and Affected Versions: Schweitzer Engineering Laboratories SEL-5037 Grid Configurator versions prior to 6.4.0.58 Description: The issue is related to an overly permissive Cross Origin Resource Sharing CORS configuration for a data gateway service in the application...