2025

In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compress

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_pci_remove(

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling stat

In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of imap allocated in t

In the Linux kernel, the following vulnerability has been resolved: jfs: add sanity check for agwidth in dbMount The w

In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on open With the

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if

In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t t

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix a resource leak relate

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix io_req_post_cqe abuse by send bun

In the Linux kernel, the following vulnerability has been resolved: arm/crc-t10dif: fix use of out-of-scope array in cr

In the Linux kernel, the following vulnerability has been resolved: arm64/crc-t10dif: fix use of out-of-scope array in

In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TP

In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check

In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi

In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer deref

In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when callin

In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts

Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead t

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. This issue affec

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'w

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version

The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all version

The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all v

A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. This issue affects some unkn

A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affe

A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. This affects an unkn

A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. Affect

The Nautic Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'np_marinetraffic_ma

Certain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary package through nodejs_2

The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vul

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high

The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high

The Calculated Fields Form WordPress plugin before 5.2.62 does not sanitise and escape some of its settings, which could

The List Children plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'list_children' sho

The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Produc

The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-

Improper access control of endpoint in HCL Domino Leap allows certain admin users to import applications from the server

Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and

Insufficient sanitization policy in HCL Leap allows client-side script injection in the deployed application through the

Insufficient default configuration in HCL Leap allows anonymous access to directory information.

Improper sanitization of SVG files in HCL Domino Volt allows client-side script injection in deployed applications.

A buffer overflow was addressed with improved input validation. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPl

The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1 and AirPlay video

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript

Unsafe default file type filter policy in HCL Domino Volt allows upload of .html file and execution of unsafe JavaScript

A vulnerability was found in Weitong Mall 1.0.0. It has been classified as critical. This affects an unknown part of the