CVE-2025-40108

creationtimestamp| type| source ---|---|--- 2025-11-09 06:20:23+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m56ho3ph77b2 2025-11-09 07:33:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m56lqqkyho2s...

CVE-2025-64431

creationtimestamp| type| source ---|---|--- 2025-11-07 21:15:54+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52yrhsvnsu2 2025-11-07 22:20:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m534esgqtm2n...

CVE-2025-12863

Rejected reason: This CVE was assigned for a libxml2 issue1012 but later deemed not valid. Ref.: https://gitlab.gnome.org/GNOME/libxml2/-/issues/1012note2608283...

CVE-2025-36135

creationtimestamp| type| source ---|---|--- 2025-11-07 19:21:23+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m52sdcb5n442...

CVE-2025-12789

creationtimestamp| type| source ---|---|--- 2025-11-07 00:41:36+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4ytrncavwn2 2025-11-07 02:18:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yz7jol3j2k...

EUVD-2025-38197

EUVD-2025-38197...

EUVD-2025-38194

EUVD-2025-38194...

EUVD-2025-38199

EUVD-2025-38199...

EUVD-2025-38204

EUVD-2025-38204...

EUVD-2025-38201

EUVD-2025-38201...

EUVD-2025-38200

EUVD-2025-38200...

EUVD-2025-38207

EUVD-2025-38207...

EUVD-2025-38202

EUVD-2025-38202...

EUVD-2025-38203

EUVD-2025-38203...

EUVD-2025-38162

MQTT does not validate hostnames...

EUVD-2025-38170

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AppManagementController.appUpgradeAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

EUVD-2025-38166

Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in AppManagementController.appUpgradeAction that allows an authenticated system administrator to execute arbitrary commands as the web server user www-data by supplying a crafted uploaded filename...

EUVD-2025-38165

Advantech WebAccess/VPN versions prior to 1.1.5 contain a SQL injection vulnerability in AjaxDeviceController.ajaxDeviceAction that allows an authenticated low-privileged observer user to inject SQL via datatable search parameters, leading to disclosure of database information...

EUVD-2025-38174

Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Netgate pfSense. Authentication is required to exploit this vulnerability. The specific flaw exists within the Suricata...

EUVD-2025-38175

SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code...