2025

In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix incorrect map used in eee linkmode inco

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: stop checking viability o

In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: add missing check for rx wcid e

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: fix linked list corruption Never leave

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds dynptr write in bpf_crypto_c

In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: avoid divide-by-zero in damon_rec

In the Linux kernel, the following vulnerability has been resolved: net: phy: transfer phy_config_inband() locking resp

In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fail

In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdi

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio

In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasan_pop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: avoid divide-by-zero in damon_lr

In the Linux kernel, the following vulnerability has been resolved: net: dev_ioctl: take ops lock in hwtstamp lower pat

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: stm32_fmc2: avoid overlapping mapping

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: remove oem i2c adapter on finish

In the Linux kernel, the following vulnerability has been resolved: net: phylink: add lock for serializing concurrent p

In the Linux kernel, the following vulnerability has been resolved: arm64: kexec: initialize kexec_buf struct in load_o

In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing ker

In the Linux kernel, the following vulnerability has been resolved: mm/slub: avoid accessing metadata when pointer is i

In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'com

In the Linux kernel, the following vulnerability has been resolved: net_sched: gen_estimator: fix est_timer() vs CONFIG

In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for CO

In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Add error handling for RX met

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery work from being queued

In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offlin

In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed bit

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on snd_soc_lo

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Initialize the chan_stats array to z

ACE vulnerability in conditional configuration file processing by QOS.CH logback-core up to and including version 1.5.1

The Custom Searchable Data Entry System plugin for WordPress is vulnerable to unauthenticated database wiping in version

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modi

The ZoloBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Gutenberg blocks in versio

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposu

The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Reques

An authentication bypass vulnerability exists in LG Innotek camera models LND7210 and LNV7210R. The vulnerability allows

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Qu

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1,

Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112,

Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or dec

An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attack

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting. This

The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allow

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The appli

Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and o

An SQL injection vulnerability in user-login.php and index.php of Karthikg1908 Hospital Management System (HMS) 1.0 allo