2025

Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitra

1. A cookie is set using the `secure` keyword for `https://target` 2. curl is redirected to or otherwise made to speak

The LWS Cleaner plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation i

An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 18.1.6, 18.2 before 18.2.6, and 18

An issue has been discovered in GitLab CE/EE affecting all versions from 7.12 before 18.1.6, 18.2 before 18.2.6, and 18.

The Spirit Framework plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.

The The Events Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the ‘s’ parameter in all vers

Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to ver

Ai command injection in Agentic AI and Visual Studio Code allows an unauthorized attacker to execute code over a network

IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.

A potential vulnerability was reported in the Lenovo Wallpaper Client that could allow arbitrary code execution under ce

A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that cou

An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attack

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drive

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12

Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2

In the Linux kernel, the following vulnerability has been resolved: dm: dm-crypt: Do not partially accept write BIOs wi

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpecte

In the Linux kernel, the following vulnerability has been resolved: crypto: x86/aegis - Add missing error checks The s

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXU

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past th

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7173: fix channels index for syscalib_m

In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix irq_request()'s irq name v

In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handlin

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on cl

In the Linux kernel, the following vulnerability has been resolved: btrfs: subpage: keep TOWRITE tag until folio is cle

In the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: clear page table entries at de

In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on device

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN whe

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Decrement TID on RX peer frag setup e

In the Linux kernel, the following vulnerability has been resolved: usb: core: config: Prevent OOB read in SS endpoint

In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix race between quota disable and q

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Validate UAC3 cluster segment desc

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Correct tid cleanup when tid setup fa

In the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race

In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to IRQ work

In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0

In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent potential UAF If we hit th

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capab

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and i

The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to arbitrary file del

The All in one Minifier plugin for WordPress is vulnerable to SQL Injection via the 'post_id' parameter in all versions

The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege e

The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all ver

The Catalog Importer, Scraper & Crawler plugin for WordPress is vulnerable to PHP code injection in all versions up to,

Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, Hoverfly’s admin WebSocket endpoint /api/v