2025

A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issu

A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. Affected by this vulnerability is an u

Abnormal Security /v1.0/rbac/users_v2/{USER_ID}/ before 2025-02-19 allows downgrading the privileges of other user accou

Cross Site Scripting vulnerability in tawk.to Live Chat v.1.6.1 allows a remote attacker to execute arbitrary code via t

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via SVG file uploads used in blog p

OpenCart version 4.1.0.4 is vulnerable to a Stored Cross-Site Scripting (XSS) attack via the blog editor. The vulnerabil

A stored cross-site scripting (XSS) vulnerability in CodeIgniter4 v4.6.0 allows attackers to execute arbitrary web scrip

Cross-Site Request Forgery (CSRF) vulnerability in Simplehelp.This issue affects Simplehelp: before 5.5.11.

Certain HP DesignJet products may be vulnerable to information disclosure though printer's web interface allowing unauth

In the Linux kernel, the following vulnerability has been resolved: drm/exynos: exynos7_drm_decon: add vblank check in

In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc. Net

In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport_{g2h,h2g} TOCTOU vsock_find_c

In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix NULL pointer dereference in vcc_send

In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort __tc_modify_qdisc if parent class

In the Linux kernel, the following vulnerability has been resolved: ALSA: ad1816a: Fix potential NULL pointer deref in

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: rtsn: Fix a null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The co

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: prevent NULL pointer dereferenc

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_serial: Fix race condition in TTY wa

In the Linux kernel, the following vulnerability has been resolved: raid10: cleanup memleak at raid10_make_request If

In the Linux kernel, the following vulnerability has been resolved: block: reject bs > ps block devices when THP is dis

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: account for Ethernet header i

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid

CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.

In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job

In the Linux kernel, the following vulnerability has been resolved: riscv: fix runtime constant support for nommu kerne

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlink

In the Linux kernel, the following vulnerability has been resolved: video: screen_info: Relocate framebuffers behind PC

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploi

The default configuration in ETSI Open-Source MANO (OSM) v.14.x, v.15.x, v.16.x, v.17.x does not impose any restrictions

A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vul

Apwide Golive 10.2.0 Jira plugin allows Server-Side Request Forgery (SSRF) via the test webhook function.

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when r

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition f

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path

In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If

In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock Th

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as cri

A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Af

A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email paramete

In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported R

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_ne

In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning W