2025

Kazaar 1.25.12 allows a JWT with none in the alg field.

DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking.

Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPD

In Frappe ERPNext 15.57.5, the function get_rfq_containing_supplier() at erpnext/buying/doctype/request_for_quotation/re

In Frappe ERPNext 15.57.5, the function get_stock_balance_for() at erpnext/stock/doctype/stock_reconciliation/stock_reco

In Frappe ERPNext 15.57.5, the function get_blanket_orders() at erpnext/controllers/queries.py is vulnerable to SQL Inje

In Frappe ERPNext 15.57.5, the function get_material_requests_based_on_supplier() at erpnext/stock/doctype/material_requ

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of T

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper va

Stored Cross-Site Scripting (XSS) vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper va

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix deinitialization of firmware reso

In the Linux kernel, the following vulnerability has been resolved: null_blk: fix poll request timeout handling When d

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use raw_smp_processor_id() instead o

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: Fix memory leak in rtw88_usb Kmemleak

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix unsafe drain work queue code If crea

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in tb_handle_dp_bandwi

In the Linux kernel, the following vulnerability has been resolved: jbd2: check 'jh->b_transaction' before removing it

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Allow UD qp_type to join multicast only

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_wr

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: fix time stamp counter initialization

In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freeze

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix slab-out-of-bounds in ses_intf_remov

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix hci_suspend_sync crash If hci_unreg

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-mem2mem: add lock to protect parameter

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: Fix leak in devfreq_dev_release() sr

In the Linux kernel, the following vulnerability has been resolved: tipc: do not update mtu if msg_max is too small in

In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_

In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_de

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix memory leak of device names The d

In the Linux kernel, the following vulnerability has been resolved: nbd: fix incomplete validation of ioctl arg We tes

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten k

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix fget leak when fs don't support nowai

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_

In the Linux kernel, the following vulnerability has been resolved: qed: allow sleep in qed_mcp_trace_dump() By defaul

In the Linux kernel, the following vulnerability has been resolved: ublk: fail to start device if queue setup is interr

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Unregister devlink params in case interfa

In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents When

In the Linux kernel, the following vulnerability has been resolved: clk: tegra: tegra124-emc: Fix potential memory leak

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Properly order ib_device_unalloc() to

In the Linux kernel, the following vulnerability has been resolved: ext4: allow ext4_get_group_info() to fail Previous

In the Linux kernel, the following vulnerability has been resolved: iommu/amd/iommu_v2: Fix pasid_state refcount dec hi

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 W

In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix error unwinding of XDP initializati

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential null dereference Th

In the Linux kernel, the following vulnerability has been resolved: media: vsp1: Replace vb2_is_streaming() with vb2_st

In the Linux kernel, the following vulnerability has been resolved: x86/platform/uv: Use alternate source for socket to

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mvpp2_main: fix possible OOB write i

In the Linux kernel, the following vulnerability has been resolved: crypto: xts - Handle EBUSY correctly As it is xts

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: tighten bounds checking in decode_messa

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not ignore genmask when lo