2025

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows a

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this is

Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising it

The WatchGuard Mobile VPN with SSL Client on Windows allows a locally authenticated non-administrative Windows user to e

The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference

When a WF200/WGM160P device is configured to operate as an Access Point, it may be vulnerable to a denial of service tri

The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv

Loaded Commerce 6.6 contains a client-side template injection vulnerability via the search parameter that allows unauthe

UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where

AirKeyboard iOS App 1.0.5 contains a missing authentication vulnerability that allows unauthenticated attackers to type

Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrar

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The serv

perl2exe <= V30.10C contains an arbitrary code execution vulnerability that allows local authenticated attackers to exec

R Radio Network FM Transmitter 1.07 allows unauthenticated attackers to access the admin user's password through the sys

Obi08/Enrollment System 1.0 contains a SQL injection vulnerability in the keyword parameter of /get_subject.php that all

Easywall 0.3.1 allows authenticated remote command execution via a command injection vulnerability in the /ports-save en

WEBIGniter 28.7.23 contains a cross-site scripting vulnerability in the user creation process that allows unauthenticate

dawa-pharma-1.0 allows unauthenticated attackers to execute SQL queries on the server, allowing them to access sensitive

Due to a regression introduced in version 3.83.0, a security header is no longer applied to certain user-uploaded conten

In the Linux kernel, the following vulnerability has been resolved: vfat: fix missing sb_min_blocksize() return value c

In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_inser

In the Linux kernel, the following vulnerability has been resolved: Input: cros_ec_keyb - fix an invalid memory access

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix scx_enable() crash on helper kthread

In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish

In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy

In the Linux kernel, the following vulnerability has been resolved: net: core: prevent NULL deref in generic_hwtstamp_i

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: remove never-working support for

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix pgtable prealloc error path The follo

In the Linux kernel, the following vulnerability has been resolved: xfs: fix out of bounds memory read error in symlink

In the Linux kernel, the following vulnerability has been resolved: net: phy: micrel: always set shared->phydev for LAN

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When w

In the Linux kernel, the following vulnerability has been resolved: fs/notify: call exportfs_encode_fid with s_umount

In the Linux kernel, the following vulnerability has been resolved: virtio-net: zero unused hash fields When GSO tunne

In the Linux kernel, the following vulnerability has been resolved: btrfs: directly free partially initialized fs_info

In the Linux kernel, the following vulnerability has been resolved: platform/x86: alienware-wmi-wmax: Fix NULL pointer

In the Linux kernel, the following vulnerability has been resolved: rv: Fully convert enabled_monitors to use list_head

In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transport

In the Linux kernel, the following vulnerability has been resolved: mm: prevent poison consumption when splitting THP

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix potential memory leak by cleanin

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: catch commit test ctx alloc failure

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: dealloc commit test ctx always The

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Account for failed debug initia

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix kernel panic on partial unmap of a

In the Linux kernel, the following vulnerability has been resolved: hwmon: (cgbc-hwmon) Add missing NULL check after de

In the Linux kernel, the following vulnerability has been resolved: most: usb: Fix use-after-free in hdm_disconnect hd

In the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling

In the Linux kernel, the following vulnerability has been resolved: media: pci: mg4b: fix uninitialized iio scan data

In the Linux kernel, the following vulnerability has been resolved: fuse: fix livelock in synchronous file put from fus

In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and