2025

In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() T

Therefore Corporation GmbH has recently become aware that Therefore™ Online and Therefore™ On-Premises contain an accoun

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request fo

Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the `enc` para

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uni

The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path

The following HP Card Readers B Models (X3D03B & Y7C05B) are potentially vulnerable to information disclosure, allowing

URVE Smart Office is vulnerable to Stored XSS in report problem functionality. An attacker with a low-privileged account

Quick.Cart is vulnerable to Cross-Site Request Forgery in product creation functionality. Malicious attacker can craft s

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability allows attackers to run ar

A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent n

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix refcount leak for cifs_sb_tlink F

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before in

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix memory leaks when rejecting a non SINGLE

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_compone

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlink_free() in ixgbe_remove

In the Linux kernel, the following vulnerability has been resolved: cxl/features: Add check for no entries in cxl_featu

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't allow evicting of BOs in same VM in a

FluxCP is a web-based Control Panel for rAthena servers written in PHP. A critical Cross-Site Request Forgery (CSRF) vul

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user

In Search Guard versions 3.1.1 and earlier, Field Masking (FM) rules are improperly enforced on fields of type IP (IP Ad

In Search Guard FLX versions 3.1.1 and earlier, Field-Level Security (FLS) rules are improperly enforced on object-value

Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. W

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue

This vulnerability allows an attacker to access parts of the application that are not protected by any type of access co

The Keras.Model.load_model method, including when executed with the intended security mitigation safe_mode=True, is vuln

IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an

The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, al

By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user l

Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated us

An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants ful

In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syz

In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Sy

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operat

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-host: Pass proper IRQ domain to generic_h

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Do not validate SSPP when it is not ready

In the Linux kernel, the following vulnerability has been resolved: fanotify: Validate the return value of mnt_ns_from_

In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC

In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Check phy before init msta_link

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode b

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_dif

In the Linux kernel, the following vulnerability has been resolved: coresight: trbe: Return NULL pointer for allocation

In the Linux kernel, the following vulnerability has been resolved: coresight: Fix incorrect handling for return value

In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot repor

In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() u