2025

In the Linux kernel, the following vulnerability has been resolved: exfat: fix the new buffer was not zeroed before wri

The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.

Sunshine is a self-hosted game stream host for Moonlight. In 0.23.1 and earlier, Sunshine's pairing protocol implementat

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.

In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: adapt set backend to use GC t

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.

The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database

A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulne

IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connect

IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If ne

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy tri

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix page fault due to max surface

In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in tri

In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix informatio

In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in trigg

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in trigger

In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in trigg

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in trigg

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocat

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlan_get_iflink().

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fixed hclge_fetch_pf_reg accesses bar sp

In the Linux kernel, the following vulnerability has been resolved: sched: sch_cake: add bounds checks to host bulk flo

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the maximum cell name length The kafs fil

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: cookie_hmac_alg: avoid using current-

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: auth_enable: avoid using current->nsp

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udp_port: avoid using current->nsprox

In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix waker_bfqq UAF after bfq_split_bfqq

A vulnerability classified as critical has been found in Tenda AC15 15.13.07.13. This affects the function formSetDevNet

A vulnerability was found in ZZCMS 2023. It has been rated as critical. Affected by this issue is some unknown functiona

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been declared as critical. Affected by this vulne

IBM Safer Payments 6.4.0.00 through 6.4.2.07, 6.5.0.00 through 6.5.0.05, and 6.6.0.00 through 6.6.0.03 could allow a rem

IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacke

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the

The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugi

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote

A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.

In multiple locations, there is a possible way to read protected files due to a missing permission check. This could lea

In onAttachFragment of ShareIntentActivity.java, there is a possible way for an app to read files in the messages app du

In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This

In ip6_append_data of ip6_output.c, there is a possible way to achieve code execution due to a heap buffer overflow. Thi

In multiple functions of mnh-sm.c, there is a possible way to trigger a heap overflow due to an integer overflow. This c

zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (met