ROOT-OS-UBUNTU-2404-CVE-2025-21795 CVE-2025-21795 in rootio-linux - Patched by Root

Root has patched CVE-2025-21795 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2025-38190 CVE-2025-38190 in rootio-linux - Patched by Root

Root has patched CVE-2025-38190 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-21955 CVE-2025-21955 in rootio-linux - Patched by Root

Root has patched CVE-2025-21955 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-23146 CVE-2025-23146 in rootio-linux - Patched by Root

Root has patched CVE-2025-23146 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38530 CVE-2025-38530 in rootio-linux - Patched by Root

Root has patched CVE-2025-38530 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

CVE-2025-69752

creationtimestamp| type| source ---|---|--- 2026-07-06 11:10:32+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxxde63zc23...

CVE-2025-11712 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2025-61655

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation VisualEditor. This vulnerability is associated with program files includes/ApiVisualEditorEdit.Php, modules/ve-mw/init/targets/ve.Init.Mw.DesktopArticleTarget.Js,...

Exploit for Deserialization of Untrusted Data in Facebook React

Hunting for CVE-2025-55182 Using Open Source Intelligenc...

CVE-2025-61736

creationtimestamp| type| source ---|---|--- 2025-12-04 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-338-04 2025-12-17 13:08:37+00:00| seen| https://bsky.app/profile/potato.software/post/3ma6q7gezfx2n 2025-12-17 15:25:07+00:00| seen|...

CVE-2025-62219

creationtimestamp| type| source ---|---|--- 2025-11-11 17:29:38+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0358 2025-11-11 17:30:42+00:00| seen| https://www.thezdi.com/blog/2025/11/11/the-november-2025-security-update-review 2025-11-11 20:00:34+00:00| seen|...

EUVD-2025-66978

Malicious code in rudi-mangut97-miaww npm...

CVE-2025-62715

creationtimestamp| type| source ---|---|--- 2025-11-05 01:10:32+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4tuidk6zsb2 2025-11-05 02:10:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4txukn3hq2j...

CVE-2025-40778 vulnerabilities

Vulnerabilities for packages: bind...

CVE-2025-40007

In the Linux kernel, the following vulnerability has been resolved: netfs: fix reference leak Commit 20d72b00ca81 "netfs: Fix the request's work item to not require a ref" modified netfsallocrequest to initialize the reference counter to 2 instead of 1. The rationale was that the requet's "work"...

Exploit for CVE-2025-11001

CVE-2025-1...

de.arbeitsagentur.opdt:keycloak-cassandra-model-tests (>=3.0.1-25.0 <=4.0.5-25.0), org.keycloak:keycloak-dependencies-server-all (>=25.0.0 <=25.0.6) +6 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (>=25.0.0 <=25.0.6)

org.keycloak:keycloak-model-storage-services MAVEN version =25.0.0, =3.0.1-25.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.0, =25.0.6 Source cves: CVE-2025-9162 Source advisory: OSV:GHSA-8HXP-QMPH-W5GQ...

CVE-2025-39853

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix potential invalid access when MAC list is empty listfirstentry never returns NULL - if the list is empty, it still returns a pointer to an invalid object, leading to potential invalid memory access when dereferenced. Fi...

CVE-2025-48522

creationtimestamp| type| source ---|---|--- 2025-09-06 04:32:55+00:00| seen| Telegram/a8O47tllOancD-j2YsHHr7CZyFKj-bg5r-uSCMq8qWulW9A...

CVE-2025-9085 User Registration & Membership <= 4.3.0 - Authenticated (Admin+) SQL Injection

The User Registration & Membership plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in version 4.3.0. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated...