9220 matches found
CVE-2025-29229
linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus...
EUVD-2025-204856
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure and data tampering...
CVE-2025-68341
In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP nodirect return section to fix race As explain in commit fa349e396e48 "veth: Fix race with AFXDP exposing old or uninitialized descriptors" for veth there is a chance after napicompletedone that another CPU can...
CVE-2025-66943
creationtimestamp| type| source ---|---|--- 2025-12-23 14:47:43+00:00| seen| https://gist.github.com/kaliworld/44b9d71ea716790a8e7da877d4f533a2...
EUVD-2025-204798
In the Linux kernel, the following vulnerability has been resolved: can: gsusb: gsusbreceivebulkcallback: check actuallength before accessing header The driver expects to receive a struct gshostframe in gsusbreceivebulkcallback. Use structgroup to describe the header of the struct gshostframe and...
EUVD-2025-204803
In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized kszirq If something goes wrong at setup, kszirqfree can be called on uninitialized kszirq for example when kszptpirqsetup fails. It leads to freeing uninitialized IRQ numbers and/or...
CVE-2023-52210
creationtimestamp| type| source ---|---|--- 2025-12-23 13:30:16+00:00| seen| https://gist.github.com/Darkcrai86/5af707c93cdf3fef02394c1c3adc8153...
CVE-2025-47761
creationtimestamp| type| source ---|---|--- 2025-12-23 12:16:46+00:00| seen| https://poliverso.org/objects/0477a01e-47032880-2067098942d068cb 2025-12-23 12:18:57+00:00| seen| https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3manq5hlshov2...
CVE-2025-66211
creationtimestamp| type| source ---|---|--- 2025-12-23 09:00:05+00:00| seen| Telegram/rCQyUNwNINgTtycBx-WAU6uHir2-K9YryZ3eKw6czKX6mA 2025-12-24 01:15:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3map3m6gar72x 2025-12-24 08:34:24+00:00| seen|...
CVE-2025-68476
A flaw was found in KEDA, a Kubernetes-based Event Driven Autoscaling component. This arbitrary file read vulnerability allows an attacker with permissions to create or modify a TriggerAuthentication resource to read any file from the node's filesystem where the KEDA pod resides. This is due to...
CVE-2025-34458
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 3658a87, contain a reachable assertion vulnerability in the APRS MIC-E decoder function aprsmice located in src/decodeaprs.c. When processing a specially crafted AX.25 frame containing a MIC-E message with an empty or...
CVE-2025-68480
A flaw was found in Marshmallow. A remote attacker could exploit a vulnerability in the Schema.loaddata, many=True function by sending a moderately sized request. This could lead to a denial of service DoS due to the disproportionate consumption of CPU time, making the system unavailable to...
EUVD-2025-204854
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections...
EUVD-2025-204859
Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the actionbandwidth function...
EUVD-2025-204858
An integer overflow in eProsima Fast-DDS v3.3 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2025-204802
A reflected Cross-Site Scripting XSS vulnerability has been identified in TechStore version 1.0. The username endpoint reflects the id query parameter directly into the HTML response without output encoding or sanitization, allowing execution of arbitrary JavaScript code in a victim’s browser...
CVE-2025-68614
creationtimestamp| type| source ---|---|--- 2025-12-22 22:57:33+00:00| published-proof-of-concept| https://github.com/librenms/librenms/security/advisories/GHSA-c89f-8g7g-59wj 2025-12-23 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1182/...
EUVD-2025-204749
Piranha has stored cross-site scripting XSS vulnerability...