2025

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fs_map_

In the Linux kernel, the following vulnerability has been resolved: vfio/pds: Fix missing detach_ioas op When CONFIG_I

In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Clean up allocated IRQs on unplug Wh

In the Linux kernel, the following vulnerability has been resolved: PCI: pnv_php: Fix surprise plug detection and recov

In the Linux kernel, the following vulnerability has been resolved: net: drop UFO packets in udp_rcv_segment() When se

In the Linux kernel, the following vulnerability has been resolved: md: make rdev_addable usable for rcu mode Our test

In the Linux kernel, the following vulnerability has been resolved: zloop: fix KASAN use-after-free of tag set When a

In the Linux kernel, the following vulnerability has been resolved: media: ti: j721e-csi2rx: fix list_del corruption I

In mupen64plus v2.6.0 there is an array overflow vulnerability in the write_rdram_regs and write_rdram_regs functions, w

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.

QuantumNous new-api v.0.8.5.2 is vulnerable to Cross Site Scripting (XSS).

IBM QRadar SIEM 7.5 through 7.5.0 Dashboard is vulnerable to cross-site scripting. This vulnerability allows an authenti

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigure

JeecgBoot versions from 3.4.3 up to 3.8.0 were found to contain a SQL injection vulnerability in the /jeecg-boot/online/

MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and termina

In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It

In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and pac

In the Linux kernel, the following vulnerability has been resolved: tls: handle data disappearing from under the TLS UL

In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us

In MindManager Windows versions prior to 24.1.150, attackers could potentially write to unexpected directories in victim

UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC clien

The Spacious theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privilege

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privilege

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privilege

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privilege

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitr

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Acc

Cross-Site Request Forgery (CSRF) vulnerability in Hossni Mubarak JobWP jobwp allows Cross Site Request Forgery.This iss

Missing Authorization vulnerability in ollybach WPPizza wppizza allows Exploiting Incorrectly Configured Access Control

Cross-Site Request Forgery (CSRF) vulnerability in Epsiloncool WP Fast Total Search fulltext-search allows Cross Site Re

Cross-Site Request Forgery (CSRF) vulnerability in Jeff Starr Simple Statistics for Feeds simple-feed-stats allows Cross

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpecommerce Recurr

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pierre Lannoy Sess

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in NooTheme Jobmonster noo-jobm

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NooTheme Jobmonste

Authorization Bypass Through User-Controlled Key vulnerability in Equalize Digital Accessibility Checker by Equalize Dig

Cross-Site Request Forgery (CSRF) vulnerability in Shahjahan Jewel Fluent Support fluent-support allows Cross Site Reque

Missing Authorization vulnerability in wpsoul Greenshift greenshift-animation-and-page-builder-blocks allows Exploiting

Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules

Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips

The WP Crontrol plugin for WordPress is vulnerable to blind Server-Side Request Forgery in versions 1.17.0 to 1.19.1 via

Western Digital Kitfox for Windows provided by Western Digital Corporation registers a Windows service with an unquoted

The WP Talroo WordPress plugin through 2.4 does not sanitise and escape a parameter before outputting it back in the pag

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Ser

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfo

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 through 2024.Q4.7, 2024.Q

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.3.32 through 7.4.3.132, and Liferay DXP 2

hippo4j 1.0.0 to 1.5.0, uses a hard-coded secret key in its JWT (JSON Web Token) creation. This allows attackers with ac