2025

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting w

Wasmtime is a runtime for WebAssembly. Prior to version 38.0.4, 37.0.3, 36.0.3, and 24.0.5, Wasmtime's Rust embedder API

A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application'

In the Linux kernel, the following vulnerability has been resolved: media: iris: fix module removal if firmware downloa

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-subdev: Fix alloc failure check in v4l2

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_objref: validate objref and objrefma

In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfs_encod

In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To pr

In the Linux kernel, the following vulnerability has been resolved: listmount: don't call path_put() under namespace se

In the Linux kernel, the following vulnerability has been resolved: ipmi: Rework user message limit handling The limit

In the Linux kernel, the following vulnerability has been resolved: kernel/sys.c: fix the racy usage of task_lock(tsk->

In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfs_re

In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing on s

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parse_app

In the Linux kernel, the following vulnerability has been resolved: media: mc: Clear minor number before put device Th

In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quota_rel

In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mnt_ns_release() When

In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix object lifecycle issue i

In the Linux kernel, the following vulnerability has been resolved: xtensa: simdisk: add input size check in proc_write

In the Linux kernel, the following vulnerability has been resolved: Revert "ipmi: fix msg stack when IPMI is disconnect

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kfd process ref leaking when userpt

In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix lost EEPROM read timeout err

In the Linux kernel, the following vulnerability has been resolved: pwm: berlin: Fix wrong register in suspend/resume

In the Linux kernel, the following vulnerability has been resolved: net/sctp: fix a null dereference in sctp_dispositio

In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn

In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter alloc

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix debug checking for np-guests using

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4

In the Linux kernel, the following vulnerability has been resolved: crypto: skcipher - Fix reqsize handling Commit afd

In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Force legacy PCI hole to UC when overridin

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix out-of-bounds access in ma

In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In pr

In the Linux kernel, the following vulnerability has been resolved: pid: Add a judgment for ns null in pid_nr_ns __tas

IBM QRadar SIEM 7.5 through 7.5.0 UP14 stores user credentials in configuration files in source control which can be rea

Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulne

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation

The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in que

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling (I

DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The de

FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based bu

Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulne

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD

JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory tr

AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file ha

Evervault is a payment security solution. A vulnerability was identified in the `evervault-go` SDK’s attestation verific

sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0

An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (Python

Dell Data Lakehouse, versions prior to 1.6.0.0, contain(s) an Improper Access Control vulnerability. A high privileged a

IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST hea