2025

Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulne

Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation

The Epson Stylus SX510W embedded web management service fails to properly handle consecutive ampersand characters in que

TEC-IT TBarCode version 11.15 contains a vulnerability in the TBarCode11.ocx ActiveX/OCX control's licensing handling (I

DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The de

FiberHome AN5506-04-FA firmware versions up to and including RP2631 and HG6245D prior to RP2602 contain a stack-based bu

Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulne

UCanCode E-XD++ Visualization Enterprise Suite contains an untrusted pointer dereference vulnerability via the TKDRAWCAD

JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory tr

AUTOMGEN versions up to and including 8.0.0.7 (also referenced as 8.022) contain a vulnerability in that project file ha

Open Access Management (OpenAM) is an access management solution. In versions prior to 16.0.0, if the "claims_parameter_

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog L

N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affects N-central: before 2025.4.

CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target inst

CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists that would allow an attacker on

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could c

A Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation from the service user to

Improper Authentication vulnerability in TYPO3 Extension "Modules" codingms/modules.This issue affects Extension "Module

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix bootlog initialization ordering As

In the Linux kernel, the following vulnerability has been resolved: idpf: cleanup remaining SKBs in PTP flows When the

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Stop dl_server before CPU goes offl

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd/sdw_utils: avoid NULL deref when devm_kas

In the Linux kernel, the following vulnerability has been resolved: mailbox: zynqmp-ipi: Fix SGI cleanup on unbind The

In the Linux kernel, the following vulnerability has been resolved: xen/events: Return -EEXIST for bound VIRQs Change

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: Skip DIMM enumeration on a disabled mem

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: mtk-cci: Fix potential error pointer

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input

In the Linux kernel, the following vulnerability has been resolved: mm: hugetlb: avoid soft lockup when mprotect to lar

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix bootup splat with separate_gpu_drm mod

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid migrating empty section It repo

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer checks in dc_stre

In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle polic

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix potential deadlock while nr_requests gr

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Fix double cleanup on devm_add_action_

In the Linux kernel, the following vulnerability has been resolved: bpf: dont report verifier bug for missing bpf_scc_v

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Disable bottom softirqs as part of spin_

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid NULL pointer dereference in f2fs

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to truncate first page in error path of f

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - request reserved interrupt f

In the Linux kernel, the following vulnerability has been resolved: dm: fix NULL pointer dereference in __dm_suspend()

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Prevent jump to NULL add_side

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_d

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM Qo

In the Linux kernel, the following vulnerability has been resolved: hwrng: ks-sa - fix division by zero in ks_sa_rng_in

In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{fr

In the Linux kernel, the following vulnerability has been resolved: blk-mq: check kobject state_in_sysfs before deletin

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix IA32_PMC_x_CFG_B MSRs access er

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input

In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: hold PM usage ref to avoid PM/MDIO

In the Linux kernel, the following vulnerability has been resolved: ext4: fix potential null deref in ext4_mb_init() I