2025

SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph par

In the Linux kernel, the following vulnerability has been resolved: efi: stmm: Fix incorrect buffer allocation method

In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xatt

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_action_get_sh

In the Linux kernel, the following vulnerability has been resolved: mISDN: hfcpci: Fix warning when deleting uninitiali

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix lockdep assertion on sync reset unloa

In the Linux kernel, the following vulnerability has been resolved: fbnic: Move phylink resume out of service_task and

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Fix memory leak in hws_pool_buddy_in

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Holistic IT

Authorization Bypass Through User-Controlled Key vulnerability in Beefull Energy Technologies Beefull App allows Exploit

A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information

Memory corruptions can be remotely triggered in the Control-M/Agent when SSL/TLS communication is configured. The issu

A stack-based buffer overflow can be remotely triggered when formatting an error message in the Control-M/Agent when SSL

A buffer overflow in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the sys

A path traversal in the Control-M/Agent can lead to a local privilege escalation when an attacker has access to the syst

The improper order of AUTHORIZED_CTM_IP validation in the Control-M/Agent, where the Control-M/Server IP address is vali

If the Access Control List is enforced by the Control-M/Agent and the C router is in use (default in Out-of-support Cont

Out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 (and potentially earlier unsupported versions) that are configu

Certain files with overly permissive permissions were identified in the out-of-support Control-M/Agent versions 9.0.18 t

Control-M/Agents use a kdb or PKCS#12 keystore by default, and the default keystore password is well known and documente

An authentication bypass vulnerability exists in the out-of-support Control-M/Agent versions 9.0.18 to 9.0.20 and potent

In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unr

In the Linux kernel, the following vulnerability has been resolved: atm: atmtcp: Prevent arbitrary write in atmtcp_recv

In the Linux kernel, the following vulnerability has been resolved: net: rose: include node references in rose_neigh re

In the Linux kernel, the following vulnerability has been resolved: net: rose: convert 'use' field to refcount_t The '

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix race with concurrent opens in rena

In the Linux kernel, the following vulnerability has been resolved: HID: asus: fix UAF via HID_CLAIMED_INPUT validation

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: use array_index_nospec with indices that

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: fix signedness in this_len calculati

In the Linux kernel, the following vulnerability has been resolved: perf: Avoid undefined behavior from stopping/starti

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add a null ptr check for dpu_encoder_n

In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointe

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_comp

In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: always use READ_ONCE() to read ring

In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: fix stack overrun when loading vlenb

In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_unplug_aux

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq d

In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk()

In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Clear the scratch_pt pointer on error A

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix memory corruption when FW resources ch

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-quicki2c: Fix ACPI dsd IC

In the Linux kernel, the following vulnerability has been resolved: HID: hid-ntrig: fix unable to handle page fault in

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add error handling for old state CRTC

In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: fix slab out-of-bounds access in m

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix unregister_netdev call order in macb

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) pa

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these b

Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed