2025

Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishi

The devices do not implement any authentication for the web interface or the MQTT server. An attacker who has network ac

The Affiliate Sales in Google Analytics and other tools plugin for WordPress is vulnerable to Open Redirect in all versi

In Eclipse JGit versions 7.2.0.202503040940-r and older, the ManifestParser class used by the repo command and the Amazo

Yandex Browser for Android prior to version 21.3.0 allows remote attackers to perform IDN homograph attack.

Yandex Browser Lite for Android before 21.1.0 allows remote attackers to spoof the address bar.

A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown par

A vulnerability was found in the libsoup package. This flaw stems from its failure to correctly verify the termination o

A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000. It has been classified as critical.

A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000 and classified as critical. Affected

A vulnerability has been found in H3C Magic R200G up to 100R002 and classified as problematic. Affected by this vulnerab

A vulnerability, which was classified as problematic, was found in H3C R2+ProG up to 200R004. Affected is the function U

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to versio

containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0.

In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible

In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible

In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible

In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf

In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart

In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck co

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers o

In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_

In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inod

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work Th

In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() er

In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock()

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device(

In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer de

In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm

In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This p

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_C

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml h

OpenFlow discovery protocol can exhaust resources because it is not rate limited

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by u

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in do_output_route

In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in mem

In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migra

In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_

In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_deactivate() idempotent Alan rep

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was s

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commi

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for

In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak