2025

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize

In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block r

In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers pr

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet r

In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properl

In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map fail

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions U

In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix s

In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to dr

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of input_ha

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc er

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments ar

In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_loc

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in ap

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_de

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exc

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue al

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index Th

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "num_cpu" from us

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferenci

In the Linux kernel, the following vulnerability has been resolved: fuse: fix runtime warning on truncate_folio_batch_e

NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably c

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability a

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an un

The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabi

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is s

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulne

A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unkn

The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability

The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_g

A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sa

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac.

HCL iAutomate is affected by a sensitive data exposure vulnerability. This issue may allow unauthorized access to sensi

HCL iAutomate includes hardcoded credentials which may result in potential exposure of confidential data if intercepted

HCL iAutomate is affected by an insufficient session expiration. This allows tokens to remain valid indefinitely unless

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to exec

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially c

A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of W

A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev mast

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check.

The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks