2025

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock bre

In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use kzalloc to avoid info

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set hugetlb mmap base address aligned wi

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race condition when u

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If os

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl

In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rio_add_net() fails

In the Linux kernel, the following vulnerability has been resolved: mm: abort vma_modify() on merge out of memory failu

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ish

In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment In __

In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and fr

In the Linux kernel, the following vulnerability has been resolved: HID: hid-steam: Fix use-after-free when detaching d

In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VL

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in chil

In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driver_override_show

In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: clean up ROC on failure If the

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: limit printed string from FW file T

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add sanity checks on rdev validity T

In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix a deadlock when recovering state on a si

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting named_trigger

In the Linux kernel, the following vulnerability has been resolved: fuse: revert back to __readahead_folio() for readah

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in reputeinfosystems

Cross-Site Request Forgery (CSRF) vulnerability in Sami Ahmed Siddiqui JSON Structuring Markup json-structuring-markup a

Cross-Site Request Forgery (CSRF) vulnerability in ProfitShare.ro WP Profitshare wp-profitshare allows Stored XSS.This i

Cross-Site Request Forgery (CSRF) vulnerability in Infoway LLC Ebook Downloader ebook-downloader allows Cross Site Reque

Raven is an open-source messaging platform. A vulnerability allowed any logged in user to execute code via an API endpoi

YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read

D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_net_asp function via the remot_ip parameter.

D-LINK DI-8100 16.07.26A1 is vulnerable to Buffer Overflow in the ipsec_road_asp function via the host_ip parameter.

Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption a

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks.

Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a poten

VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails t

Specifically crafted MongoDB wire protocol messages can cause mongos to crash during command validation. This can occur

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnera

The Real Estate 7 WordPress theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via any location that typi

Missing Authorization vulnerability in YayCommerce YayExtra yayextra allows Exploiting Incorrectly Configured Access Con

Deserialization of Untrusted Data vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Object Injection.This

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in randyjensen RJ Qui