CVE-2025-32788

CVE-2025-32788 – OctoPrint Up to version 1.10.3, OctoPrint could bypass the login redirect and directly access rendered HTML of certain frontend pages by abusing authentication checks. The issue centers on the frontend authentication flow, notably functions like require_login, require_login_with,...

PT-2025-17488 · WordPress · User Registration & Membership

Name of the Vulnerable Software and Affected Versions: User Registration & Membership WordPress plugin version 4.1.2 and earlier Description: The issue concerns the User Registration & Membership WordPress plugin, where data in an AJAX action is not properly validated when the Membership Addon is...

CVE-2025-23174

creationtimestamp| type| source ---|---|--- 2025-04-21 17:01:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12707 2025-04-21 19:30:53+00:00| seen| Telegram/hzeboNNBaj7yZ1hOkqtr9xZOg402vowIgtzOJPP89RrSkNk 2025-04-21 19:49:33+00:00| seen| https://t.me/cvedetector/23448 2025-04-21...

CVE-2024-42284

creationtimestamp| type| source ---|---|--- 2025-04-21 13:32:31+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lndbn7ih6n2z...

RHEL 9 : kernel (RHSA-2025:3888)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:3888 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: usb-audio: Fix out of bounds read...

CVE-2025-3805

creationtimestamp| type| source ---|---|--- 2025-04-19 16:43:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln6lf273k62a 2025-04-19 17:02:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12588 2025-04-19 19:19:34+00:00| seen|...

CVE-2025-43903

NSSCryptoSignBackend.cc in Poppler before 25.04.0 does not verify the adbe.pkcs7.sha1 signatures on documents, resulting in potential signature forgeries...

CVE-2025-40325

In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQNOWAIT raid10handlediscard should wait barrier before returning a discard bio which has REQNOWAIT. And there is no need to print warning calltrace if a discard bio...

CVE-2025-39930

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...

CVE-2025-38049

In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors Commit 6eac36bb9eb0 "x86/resctrl: Allocate the cleanest CLOSID by searching closidnumdirtyrmid" added logic that causes resctrl to search for the CLOSID...

CVE-2025-40114

In the Linux kernel, the following vulnerability has been resolved: iio: light: Add check for array bounds in veml6075readinttimems The array contains only 5 elements, but the index calculated by veml6075readinttimeindex can range from 0 to 7, which could lead to out-of-bounds access. The check...

BELL-CVE-2025-23135

Bulletin has no description...

BELL-CVE-2025-22107

Bulletin has no description...

BELL-CVE-2025-23132

Bulletin has no description...

BELL-CVE-2025-22127

Bulletin has no description...

BELL-CVE-2025-22089

Bulletin has no description...

BELL-CVE-2025-22064

Bulletin has no description...

CVE-2025-29661

creationtimestamp| type| source ---|---|--- 2025-04-17 18:54:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqxzxj32a 2025-04-17 20:30:16+00:00| seen| https://t.me/cvedetector/23246...

CVE-2025-32594

Insertion of Sensitive Information Into Sent Data vulnerability in WPMinds Simple WP Events simple-wp-events allows Retrieve Embedded Sensitive Data.This issue affects Simple WP Events: from n/a through = 1.8.17...

CVE-2025-22121

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4xattrinodedecrefall There's issue as follows: BUG: KASAN: use-after-free in ext4xattrinodedecrefall+0x6ff/0x790 Read of size 4 at addr ffff88807b003000 by task syz-executor.0/15172 CPU: 3 PID:...