2025

In the Linux kernel, the following vulnerability has been resolved: net_sched: red: fix a race in __red_change() Gerra

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: fix a race in ets_qdisc_change() G

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix use-after-free of sq->thread in __io_

In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: Eliminate recurrent out-of-bounds bug

In the Linux kernel, the following vulnerability has been resolved: VMCI: fix race between vmci_host_setup_notify and v

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_subb

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Don't treat wb connector as physic

In the Linux kernel, the following vulnerability has been resolved: espintcp: remove encap socket caching to avoid refe

In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_

HP Universal Print Driver is potentially vulnerable to denial of service due to buffer overflow in versions of UPD 7.4 o

An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and Ex

A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts

An authenticated local file inclusion vulnerability exists in Microweber CMS versions <= 1.2.11 through misuse of the ba

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This i

In the Linux kernel, the following vulnerability has been resolved: ksmbd: use list_first_entry_or_null for opinfo_get_

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check stream id dml21 wrapper to g

Graylog is a free and open log management platform. In versions 6.2.0 to before 6.2.4 and 6.3.0-alpha.1 to before 6.3.0-

The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in th

The target device exposes a service on a specific TCP port with a configured endpoint. The access to that endpoint is g

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated u

The misconfiguration in the sudoers configuration of the operating system in Infinera G42 version R6.1.3 allows low pri

Nokia Single RAN AirScale baseband allows an authenticated administrative user access to all physical boards after perfo

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to PHP Object

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Cross-Site Reques

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via

The Amazon Products to WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to time-based SQL In

The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insuff

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to SQL Injection via

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclus

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrit

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a

Pillow is a Python imaging library. In versions 11.2.0 to before 11.3.0, there is a heap buffer overflow when writing a

@cyanheads/git-mcp-server is an MCP server designed to interact with Git repositories. Prior to version 2.1.5, there is

Misconfigured settings in IITB SSO v1.1.0 allow attackers to access sensitive application data.

The Contec Co.,Ltd. CONPROSYS HMI System (CHS) exposes a PHP phpinfo() debug page to unauthenticated users that may cont

It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a

A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. This vulnerabilit

A vulnerability, which was classified as critical, was found in Campcodes Employee Management System 1.0. This affects a

A vulnerability, which was classified as critical, has been found in Campcodes Employee Management System 1.0. Affected

A vulnerability classified as critical was found in Campcodes Employee Management System 1.0. Affected by this vulnerabi

A vulnerability classified as critical has been found in Campcodes Employee Management System 1.0. Affected is an unknow

A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects

A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerabil

Sentry is a developer-first error tracking and performance monitoring tool. Prior to version 25.5.0, an attacker with a

A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.

A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects

A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue