2025

In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irq_data_get_

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() W

In the Linux kernel, the following vulnerability has been resolved: workqueue: fix data race with the pwq->stats[] incr

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance sanity check while generating att

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length

In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL p

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Change logging to dev for mtk_dp_

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparent

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle kvm_arm_init failure correctly i

In the Linux kernel, the following vulnerability has been resolved: recordmcount: Fix memory leaks in the uwrite functi

In the Linux kernel, the following vulnerability has been resolved: ext4: fix WARNING in mb_find_extent Syzbot found t

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix wrong setting of max_corr_read_error

In the Linux kernel, the following vulnerability has been resolved: net: fix net_dev_start_xmit trace event vs skb_tran

In the Linux kernel, the following vulnerability has been resolved: power: supply: axp288_fuel_gauge: Fix external_powe

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Fix integer overflow in radeon_cs_parse

In the Linux kernel, the following vulnerability has been resolved: fsdax: force clear dirty mark if CoW XFS allows Co

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: fix overlap expiration w

In the Linux kernel, the following vulnerability has been resolved: net: hns: fix possible memory leak in hnae_ae_regis

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_create() If the cifs al

In the Linux kernel, the following vulnerability has been resolved: misc: tifm: fix possible memory leak in tifm_7xx1_s

In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix a memory leak in an error handling path

In the Linux kernel, the following vulnerability has been resolved: mmc: rtsx_usb_sdmmc: fix return value check of mmc_

In the Linux kernel, the following vulnerability has been resolved: ext4: init quota for 'old.inode' in 'ext4_rename'

In the Linux kernel, the following vulnerability has been resolved: ext4: fix null-ptr-deref in ext4_write_info I caug

In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible name leaks when rio_add_devic

In the Linux kernel, the following vulnerability has been resolved: floppy: Fix memory leak in do_floppy_init() A memo

In the Linux kernel, the following vulnerability has been resolved: media: vimc: Fix wrong function called when vimc_in

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2

A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The

code-projects Human Resource Integrated System 1.0 is vulnerable to Cross Site Scripting (XSS) in the Add Child Informat

code-projects Document Management System 1.0 has a Cross Site Scripting (XSS) vulnerability, where attackers can leak ad

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the area where users submit

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting'), Improper Encoding or Escapi

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Impro

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting (XSS) in the registration function.

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get_sh

In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitiali

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unloa

In the Linux kernel, the following vulnerability has been resolved: fbnic: Move phylink resume out of service_task and

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_in

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Holistic IT

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploit

A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information

A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL

The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is vali

Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 t

Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documente

In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unr

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: fix signedness in this_len calculati