2025

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Kill URBs before clearing tx status

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: clear initialized flag for deinit-ed

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix possible OOB access in mt79

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix use-after-free in amdgpu_userq_susp

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthor_gem_create_with_han

In the Linux kernel, the following vulnerability has been resolved: xen: fix UAF in dmabuf_exp_from_pages() [dma_buf_f

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPF

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix double free in 'hci_discov

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_devcd_dump: fix out-of-bounds via de

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not

In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: Fix fp initialization for exception bou

In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow

In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a rac

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp

In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode use after free in ext4_end_io_rsv_w

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit-value in extent_info usage

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_sync_inode_meta() s

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fs_evict_inode As sy

In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Com

In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43: Property entry should be a null-termi

In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment(

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A s

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: unlink NAPIs from queues on error to op

In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in

In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perf_mmap() fail When per

In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split of buffer mappings Th

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0

In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_c

In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma->mm is freed after vma->vm_r

A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges with

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to

An unauthenticated remote attacker can get access without password protection to the affected device. This enables the u

The JS Archive List plugin for WordPress is vulnerable to time-based SQL Injection via the build_sql_where() function in

Multiple FunnelKit plugins are vulnerable to Sensitive Information Exposure via the wf_get_cookie shortcode. This makes

The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the

The Sante PACS Server Web Portal sends credential information without encryption.

The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a deni

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applicati

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applicati

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applicati

In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applicati

An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate pri

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/form

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/f

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFi

** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons

Thermo Fisher Scientific ePort through 3.0.0 has Incorrect Access Control.

Shaarli is a minimalist bookmark manager and link sharing service. Prior to 0.15.0, the input string in the cloud tag pa

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Cross-site scripting (XSS) vulnerab