2025

In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during mul

An authenticated user can modify application state data.

Password guessing limits could be bypassed when using LDAP authentication.

In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be i

In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN inter

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can

In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lea

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-aft

In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek repor

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by valid

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_sl

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_

In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." Th

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for gu

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph

In the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize

In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG w

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow in parse_i

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix oob write in trace_seq_to_buffer() sy

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursio

In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A u

In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with n

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with n

In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with n

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -

In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab->obj_exts always When memo

In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between io_uring_cmd_complete_in_tas

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp T

In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when trying to hand

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The se

The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to creat

An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parame

TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS an

TYPO3 is an open source, PHP based web content management system. Starting in version 10.0.0 and prior to versions 10.4.

An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request.

VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Fo

VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port

VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443

In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP conn

In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob(

The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it bac

A passback vulnerability which relates to office/small office multifunction printers and laser printers.

A passback vulnerability which relates to production printers and office multifunction printers.

samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to ver