CVE-2025-25276

creationtimestamp| type| source ---|---|--- 2025-04-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04...

CVE-2025-3573

Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting XSS in the showLabel function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary...

CVE-2025-32072

Improper Encoding or Escaping of Output vulnerability in The Wikimedia Foundation Mediawiki Core - Feed Utils allows WebView Injection.This issue affects Mediawiki Core - Feed Utils: from 1.39 through 1.43...

CVE-2025-32696

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/actions/RevertAction.Php, includes/api/ApiFileRevert.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1...

CVE-2025-29088

creationtimestamp| type| source ---|---|--- 2025-04-10 15:32:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta3q3ve2g 2025-04-10 17:52:10+00:00| seen| https://t.me/cvedetector/22659 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-0...

CVE-2025-2408

Removed by vendor...

CVE-2025-32372 Server-Side Request Forgery (SSRF) in DotNetNuke.Core

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. A bypass has been identified for the previously known vulnerability CVE-2017-0929, allowing unauthenticated attackers to execute arbitrary GET requests against target systems, including...

CVE-2025-29816 Microsoft Word Security Feature Bypass Vulnerability

...

CVE-2025-27737 Windows Security Zone Mapping Security Feature Bypass Vulnerability

...

CVE-2025-26637 Windows BitLocker Security Feature Bypass Vulnerability

...

CVE-2025-29822 Microsoft OneNote Security Feature Bypass Vulnerability

...

CVE-2025-27731

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-21203

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review...

CVE-2025-26665

creationtimestamp| type| source ---|---|--- 2025-04-08 16:14:25+00:00| seen| https://www.thezdi.com/blog/2025/4/8/the-april-2025-security-update-review 2025-04-08 20:47:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11014...

CVE-2025-22461

creationtimestamp| type| source ---|---|--- 2025-04-08 14:47:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10927 2025-04-09 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-235/ 2025-04-10 20:47:45+00:00| seen|...

CVE-2025-22012

In the Linux kernel, the following vulnerability has been resolved: Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on appssmmu" There are reports that the pagetable walker cache coherency is not a given across the spectrum of SDM845/850 devices, leading to lock-ups and resets. It works fine o...

CVE-2025-22014

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pdr: Fix the potential deadlock When some client process A call pdraddlookup to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and cal...

CVE-2025-31175

creationtimestamp| type| source ---|---|--- 2025-04-07 05:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114295107356607964 2025-04-07 06:32:02+00:00| published-proof-of-concept| Telegram/EsnBsJ3Ssj-UYUC8Y7f1dDSxyldCCaK6EjJlv4mvyH2MMw 2025-04-07 07:17:49+00:00| seen|...

CVE-2025-3326

A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This vulnerability affects unknown code of the file /common/upload of the component File Upload. The manipulation of the argument File leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-32220 WordPress Salon booking system plugin <= 10.30.23 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salon booking system: from n/a through = 10.30.23...