2025

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible refcount leak in smb2_open() R

In the Linux kernel, the following vulnerability has been resolved: igb: revert rtnl_lock() that causes deadlock The c

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling c

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Synchronize the IOCB count to be in

In the Linux kernel, the following vulnerability has been resolved: fscrypt: destroy keyring after security_sb_delete()

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hw_enable upon susp

In the Linux kernel, the following vulnerability has been resolved: dm crypt: add cond_resched() to dmcrypt_write() Th

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix memory leak in margining Memory f

In the Linux kernel, the following vulnerability has been resolved: usb: ucsi: Fix NULL pointer deref in ucsi_connector

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix warning when handle discover_

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: don't let userspace block dri

In the Linux kernel, the following vulnerability has been resolved: dm stats: check for and propagate alloc_percpu fail

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit [WH

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Perform lockless command completion

In the Linux kernel, the following vulnerability has been resolved: ca8210: fix mac_len negative array access This pat

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix call trace warning and hang when re

In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Do _all_ initialization before exposing /

Vault Community and Vault Enterprise Key/Value (kv) Version 2 plugin may unintentionally expose sensitive information in

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Profelis In

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Info

The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bbp_topic_title’ param

The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘bp_nouveau_ajax_media_

The BuddyBoss Platform plugin and BuddyBoss Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘in

In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaSc

The WPML plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpml_language_switcher short

The MStore API – Create Native Android & iOS Apps On The Cloud plugin for WordPress is vulnerable to limited privilege e

The Formality plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all version

The Taxonomy Chain Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's pn_chain_menu

The eHDR CTMS from Sunnet has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject

The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all ver

The Homey theme for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.

The Homey theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on th

Multiple plugins and/or themes for WordPress are vulnerable to unauthorized access due to a missing capability check on

Multiple plugins and/or themes for WordPress using Smart Framework are vulnerable to Stored Cross-Site Scripting due to

The FULL – Cliente plugin for WordPress is vulnerable to SQL Injection via the 'formId' parameter in all versions 3.1.5

The Flynax Bridge plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on t

The GmapsMania plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's gmap shortcode in all

The KiwiChat NextClient plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all

The Yame | Link In Bio plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and i

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Affected is

A vulnerability was found in SourceCodester Patient Record Management System 1.0. It has been rated as critical. This is

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized

IBM Concert Software 1.0.0 through 1.0.5 could allow a remote attacker to traverse directories on the system. An attacke

IBM Concert Software 1.0.0 through 1.0.5 uses weaker than expected cryptographic algorithms that could allow an attacker

IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenti

IBM Concert Software 1.0.0 through 1.0.5 could allow an authenticated user to cause a denial of service due to the expan

A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown funct

A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some

IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under