Menu

Star on GitHub · 3.2k

2025

48,153 vulnerabilities published in 2025.

Results

16,974 of 48,153· Page 216/340
7.8
CVE-2025-37886

In the Linux kernel, the following vulnerability has been resolved: pds_core: make wait_context part of q_info Make th

8.8
CVE-2025-37885

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reset IRTE to host control if *new* route

7.8
CVE-2025-37882

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun ev

7.0
CVE-2025-37876

In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_

7.8
CVE-2025-37873

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error pat

7.5
CVE-2025-37871

In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue d

7.8
CVE-2025-37869

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate

7.8
CVE-2025-37861

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm t

7.8
CVE-2025-37856

In the Linux kernel, the following vulnerability has been resolved: btrfs: harden block_group::bg_list against list_del

7.8
CVE-2025-37854

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW sche

8.8
CVE-2025-37849

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation

7.1
CVE-2025-37846

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set o

7.8
CVE-2025-37845

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules

7.8
CVE-2025-37840

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixe

7.8
CVE-2025-37839

In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal em

7.3
CVE-2025-4466

A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an

7.3
CVE-2025-4465

A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue i

7.3
CVE-2025-4464

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vu

7.3
CVE-2025-4463

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an u

8.8
CVE-2025-4462

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects

7.3
CVE-2025-4457

A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerabilit

7.3
CVE-2025-4456

A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown f

7.5
CVE-2025-3713

The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.21

7.5
CVE-2025-3712

The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.21

7.0
CVE-2025-4455

A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects s

8.8
CVE-2025-4452

A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function

8.8
CVE-2025-4451

A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is

8.8
CVE-2025-4450

A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSe

8.8
CVE-2025-4449

A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the fun

8.8
CVE-2025-4448

A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function for

8.0
CVE-2025-4446

A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the

8.8
CVE-2025-4442

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the f

8.8
CVE-2025-4441

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function form

8.0
CVE-2025-4440

A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the funct

8.7
CVE-2025-47732

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

8.1
CVE-2025-33072

Improper access control in Azure allows an unauthorized attacker to disclose information over a network.

7.4
CVE-2025-27720

The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal

7.5
CVE-2025-27578

Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM fil

7.8
CVE-2025-1331

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on t

7.8
CVE-2025-1330

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1  could allow a local user to execute arbitrary code on

7.8
CVE-2025-1329

IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on t

7.5
CVE-2024-9448

On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged

8.7
CVE-2024-8100

On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used

7.5
CVE-2025-1948

In Eclipse Jetty versions 12.0.0 to 12.0.16 included, an HTTP/2 client can specify a very large value for the HTTP/2 set

7.2
CVE-2024-13009

In Eclipse Jetty versions 9.4.0 to 9.4.56 a buffer can be incorrectly released when confronted with a gzip error when in

7.5
CVE-2025-26847

An issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all passwords are masked.

8.8
CVE-2025-45846

ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in th

8.8
CVE-2025-45845

TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g paramet

8.8
CVE-2025-45844

TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter

8.8
CVE-2025-45843

TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter

Test your stack for 2025issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.