2025

Insufficient escaping in the report scheduler within Checkmk <2.4.0p13, <2.3.0p38, <2.2.0p46 and 2.1.0 (EOL) allows auth

Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Esca

Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p4

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted databas

IBM Aspera 5.0.0 through 5.0.13.1 could disclose sensitive user information from the system to an authenticated user d

IBM Aspera Faspex 5.0.0 through 5.0.13.1 could allow a privileged user to cause a denial of service from improperly vali

A flaw was found in the integration of Active Directory and the System Security Services Daemon (SSSD) on Linux systems.

IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be truste

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io_li

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix untrusted unsigned subtract Fix the fol

In the Linux kernel, the following vulnerability has been resolved: iommu/amd/pgtbl: Fix possible race while increase p

In the Linux kernel, the following vulnerability has been resolved: gpiolib: acpi: initialize acpi_gpio_info struct Si

A vulnerability exists in the Progress Flowmon web application prior to version 12.5.5, whereby a user who clicks a mali

In Flowmon versions prior to 12.5.5, a vulnerability has been identified that allows a user with administrator privilege

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all versi

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 5.2 prior to 18.2.8, 18.3 prior to 18.3.4, an

GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 to 18.3.4, 18.4 to 18.4.2 that, under certa

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missin

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix incorrect retrival of acp_chip_

In the Linux kernel, the following vulnerability has been resolved: iommu/s390: Make attach succeed when the device was

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: increase scan_ies_len for S1G Curr

In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igc_probe() on LED setup error Whe

In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconne

In the Linux kernel, the following vulnerability has been resolved: clk: sunxi-ng: mp: Fix dual-divider clock rate read

The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPr

Grafana Image Renderer is vulnerable to remote code execution due to an arbitrary file write vulnerability. This is due

The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeo

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inc

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to arbitrary file

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable

Memory corruption while invoking remote procedure IOCTL calls.

Memory corruption while allocating buffers in DSP service.

Memory corruption while processing user buffers.

Memory corruption while processing an escape call.

Memory corruption while processing control commands in the virtual memory management interface.

Transient DOS may occur when multi-profile concurrency arises with QHS enabled.

memory corruption while processing an image encoding completion event.

Memory corruption while processing IOCTL call to get the mapping.

Memory corruption while processing escape commands from userspace.

Memory corruption while performing SCM call with malformed inputs.

Memory corruption while performing SCM call.

Memory corruption while processing a malformed license file during reboot.

Memory corruption during PlayReady APP usecase while processing TA commands.

Transient DOS while processing IOCTL call for image encoding.

Memory corruption while processing camera platform driver IOCTL calls.

Information disclosure while processing batch command execution in Video driver.

Transient DOS while processing video packets received from video firmware.

Information disclosure may occur while processing the hypervisor log.

Memory corruption may occur while processing IOCTL call for DMM/WARPNCC CONFIG request.