2025

In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in iov

In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is refer

In the Linux kernel, the following vulnerability has been resolved: xfrm: delete intermediate secpath entry in packet o

In the Linux kernel, the following vulnerability has been resolved: ipmr: do not call mr_mfc_uses_dev() for unres entri

In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Ro

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: add missing cpu_to_node to kvzalloc_node

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is n

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent

In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmap_get_stats() with b

In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Te

In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dup_mmap() failures a

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: IOMMU incorrectly marks MMIO

In the Linux kernel, the following vulnerability has been resolved: OPP: add index check to assert to avoid buffer over

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix channel survey memory allocation

In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: don't allow 1 packet limit The

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix read pointer after free in ath12k

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_load_c

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix assumption that Resolution Multiplie

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Cleanup global '__scm' on prob

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix use-after-free in dw_i3c_master driver

In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix memory corruption due to incor

In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cow_file_range(

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when run_delalloc_no

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 3

When AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is vulnerable to a man-in-

SunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware upgrades. Sending a speci

SunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate Validation. The app expli

A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Swi

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which ha

A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML

A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML

This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw c

In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no

The Simple catalogue WordPress plugin through 1.0.2 does not sanitise and escape a parameter before outputting it back i

The WP Extra Fields WordPress plugin through 1.0.1 does not sanitise and escape a parameter before outputting it back in

The Om Stripe WordPress plugin through 02.00.00 does not sanitise and escape a parameter before outputting it back in th

The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape a parameter before outputting it back i

The Post Timeline WordPress plugin before 2.3.10 does not sanitise and escape a parameter before outputting it back in t

The Custom Block Builder WordPress plugin before 3.8.3 does not sanitise and escape a parameter before outputting it ba

The Simple:Press Forum WordPress plugin before 6.10.11 does not sanitise and escape a parameter before outputting it bac

The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not sanitise and escape a parameter before ou

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which comp

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows i

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setup_tx_descriptors After