2025

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd

Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 202

A vulnerability was detected in ZKEACMS 4.3. Impacted is the function Proxy of the file src/ZKEACMS/Controllers/MediaCon

Relative path traversal vulnerability due to improper input validation in Digilent WaveForms that may result in arbitrar

Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection.

Dataease is an open-source data visualization and analysis platform. In versions up to and including 2.10.12, the Impala

Dataease is an open source data analytics and visualization platform. In Dataease versions up to 2.10.12, the patch intr

A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu fil

Cross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execute arbitrary code via a crafted

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function add_tag() at `frappe/desk/doctype/tag/tag.py

Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 202

IBM OpenPages 9.0 and 9.1 allows web page cache to be stored locally which can be read by another user on the system.

The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker t

Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server o

Vulnerability in SK Hynix DDR5 on x86 allows a local attacker to trigger Rowhammer bit flips impacting the Hardware Inte

TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 functio

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix scheduling while atomic in decompression

In the Linux kernel, the following vulnerability has been resolved: coresight: Fix memory leak in acpi_buffer->pointer

In the Linux kernel, the following vulnerability has been resolved: ovl: fix null pointer dereference in ovl_permission

In the Linux kernel, the following vulnerability has been resolved: VMCI: check context->notify_page after call to get_

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix possible underflow for display

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check S1G action frame size Before

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix FFA device names for logical

In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: Fix a potential resource l

In the Linux kernel, the following vulnerability has been resolved: cacheinfo: Fix shared_cpu_map to handle shared cach

In the Linux kernel, the following vulnerability has been resolved: HID: nvidia-shield: Reference hid_device devm alloc

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use RCU for hci_conn_params and iterate

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: fix NULL pointer dereference i

In the Linux kernel, the following vulnerability has been resolved: firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysf

In the Linux kernel, the following vulnerability has been resolved: clk: imx: clk-imx8mn: fix memory leak in imx8mn_clo

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: install stub fence into potential unuse

In the Linux kernel, the following vulnerability has been resolved: btrfs: set_page_extent_mapped after read_folio in b

In the Linux kernel, the following vulnerability has been resolved: cifs: fix DFS traversal oops without CONFIG_CIFS_DF

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Fix handling of virtual Fibre Channe

In the Linux kernel, the following vulnerability has been resolved: media: pci: tw68: Fix null-ptr-deref bug in buf pre

In the Linux kernel, the following vulnerability has been resolved: btrfs: add handling for RAID1C23/DUP to btrfs_reduc

In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/hisi: Drop second sensor hi3660 Th

In the Linux kernel, the following vulnerability has been resolved: nfsd: call op_release, even when op_func returns an

In the Linux kernel, the following vulnerability has been resolved: xsk: check IFF_UP earlier in Tx path Xsk Tx can be

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Add check for kzalloc As kzalloc may

In the Linux kernel, the following vulnerability has been resolved: phy: hisilicon: Fix an out of bounds check in hisi_

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v1

In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not corrupt the pfn list when doing bat

In the Linux kernel, the following vulnerability has been resolved: drm/tests: helpers: Avoid a driver uaf when using

In the Linux kernel, the following vulnerability has been resolved: watchdog: Fix kmemleak in watchdog_cdev_register k

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix deadlock triggered by cancel_delayed_w

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix kernel panic by accessing unalloc

In the Linux kernel, the following vulnerability has been resolved: erofs: Fix detection of atomic context Current che

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning in cifs_smb3_do_mount() T