2025

An Insecure Direct Object Reference (IDOR) vulnerability was identified in the `POST /v1/templates` endpoint of the Luna

IBM Storage Virtualize 8.4, 8.5, 8.6, and 8.7 could allow an authenticated user to escalate their privileges in an SSH s

IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to cause a denial of service using a specially cr

An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user accou

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary

CWE-20: Improper Input Validation vulnerability exists that could cause a Denial Of Service when specific crafted FTP co

In engineer mode service, there is a possible command injection due to improper input validation. This could lead to loc

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows

A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub_48E628 of the file /goform

A vulnerability was found in Tenda AC20 16.03.08.12. This vulnerability affects the function save_virtualser_data of the

A vulnerability has been found in Tenda AC20 16.03.08.12. This affects the function set_qosMib_list of the file /goform/

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix wrong next length validation of ea buffe

In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate session id and tree id in the compo

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bound read in smb2_write ksmbd_s

The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via th

The The Soledad theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including,

In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec(

In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the rece

In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AXP71

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by

In the Linux kernel, the following vulnerability has been resolved: net: appletalk: Fix device refcount leak in atrtr_c

In the Linux kernel, the following vulnerability has been resolved: tracing: Add down_write(trace_event_sem) when addin

In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe(

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix potential use-after-free in airoha

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable

In the Linux kernel, the following vulnerability has been resolved: net: libwx: properly reset Rx ring descriptor When

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When c

In the Linux kernel, the following vulnerability has been resolved: comedi: aio_iiro_16: Fix bit shift out of bounds W

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject %p% format string in bprintf-like helpe

In the Linux kernel, the following vulnerability has been resolved: ice: add NULL check in eswitch lag check The funct

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix irq-disabled in local_bh_enable() The r

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recv-recv race of completed call If a c

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbd_response slab to allow usercopy

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetti

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix oops due to non-existence of prealloc ba

In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Use TSC_FACTOR for Secure TSC frequency ca

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial

In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with

The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_act

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to unauthorized admin account creation in

The School Management System for Wordpress plugin for WordPress is vulnerable to arbitrary file uploads due to missing f

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions u

The School Management System for Wordpress plugin for WordPress is vulnerable to SQL Injection via several parameters ac

Claude Code is an agentic coding tool. Prior to version 1.0.4, it's possible to bypass the Claude Code confirmation prom

HashiCorp's go-getter library subdirectory download feature is vulnerable to symlink attacks leading to unauthorized rea

Server-Side Request Forgery (SSRF) vulnerability in Drupal AI SEO Link Advisor allows Server Side Request Forgery.This i

Missing Authorization vulnerability in Drupal Config Pages allows Forceful Browsing. This issue affects Config Pages: f