2304 matches found
BELL-CVE-2025-21892
Bulletin has no description...
BELL-CVE-2023-52982
Bulletin has no description...
BELL-CVE-2023-53016
Bulletin has no description...
CVE-2025-30232
A use-after-free in Exim 4.96 through 4.98.1 could allow users with command-line access to escalate privileges...
Debian dla-4093 : libsaml-dev - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4093 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4093-1 [email protected] https://www.debian.org/lts/security/...
PT-2025-14579 · Winrar · Winrar
Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.11 Description: A security issue exists in WinRAR that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file. If a symbolic link specially...
CVE-2025-26898
creationtimestamp| type| source ---|---|--- 2025-03-27 22:36:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9239 2025-03-27 22:40:19+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llfelqspvw2v 2025-03-28 01:01:18+00:00| seen| https://t.me/cvedetector/21350 2025-03-28...
CVE-2023-52933
In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix handling and sanity checking of xattrids count A Sysbot 1 corrupted filesystem exposes two flaws in the handling and sanity checking of the xattrids count in the filesystem. Both of these flaws cause computation...
CVE-2025-31176
A flaw was found in gnuplot. The plot3dpoints function may lead to a segmentation fault and cause a system crash...
CVE-2025-29485
libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted SWF file...
CVE-2025-29993
creationtimestamp| type| source ---|---|--- 2025-03-27 09:26:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9035 2025-03-27 12:28:06+00:00| seen| https://t.me/cvedetector/21272 2025-03-29 23:53:04+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3llkjloo3l22b...
CVE-2025-2725
creationtimestamp| type| source ---|---|--- 2025-03-25 02:23:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8581 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:22+00:00| seen|...
CVE-2025-2754
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...
CVE-2025-2577
creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtz7yv5b2h 2025-03-22 14:33:18+00:00| seen| https://t.me/cvedetector/20866...
CVE-2025-2482
creationtimestamp| type| source ---|---|--- 2025-03-22 07:38:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkx7uzg3zk24 2025-03-22 10:22:25+00:00| seen| https://t.me/cvedetector/20855...
Gradio Path Traversal vulnerability
A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blockedpath functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks...
CVE-2024-8556
A stored cross-site scripting XSS vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string run ID is appended and rendered as HTML. This allows ...
CVE-2024-7035 Cross-Site Request Forgery (CSRF) in open-webui/open-webui
In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery CSRF attacks, where an unaware user can unintentionally perform sensitive actions by simply...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57802)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57802 advisory. - In the Linux kernel, the following vulnerability has been resolved: netrom: check buffer length before...