2025

In the Linux kernel, the following vulnerability has been resolved: block: mark GFP_NOIO around sysfs ->store() sysfs

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set Th

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connectio

In the Linux kernel, the following vulnerability has been resolved: block: fix queue freeze vs limits lock order in sys

In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero Th

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix warnings during S3 suspend The enab

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am

In the Linux kernel, the following vulnerability has been resolved: firewire: test: Fix potential null dereference in f

In the Linux kernel, the following vulnerability has been resolved: rhashtable: Fix potential deadlock by moving schedu

In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix a NULL vs IS_ERR() bug The de

Nagios XI 2024R1.2.2 is vulnerable to an open redirect flaw on the Tools page, exploitable by users with read-only permi

AVE System Web Client v2.1.131.13992 was discovered to contain a cross-site scripting (XSS) vulnerability.

Mastodon is a self-hosted, federated microblogging platform. In versions prior to 4.1.23, 4.2.16, and 4.3.4, when the vi

A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unkno

A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of t

Mastodon is a self-hosted, federated microblogging platform. Starting in version 4.2.0 and prior to versions 4.2.16 and

An issue in Tencent Technology (Beijing) Company Limited Tencent MicroVision iOS 8.137.0 allows attackers to access sens

A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue

An issue in Suning Commerce Group Suning EMall iOS 9.5.198 allows attackers to access sensitive user information via sup

An issue in Beitatong Technology LianJia iOS 9.83.50 allows attackers to access sensitive user information via supplying

An issue in Boohee Technology Boohee Health iOS 13.0.13 allows attackers to access sensitive user information via supply

An issue in Merchants Union Consumer Finance Company Limited Merchants Union Finance iOS 6.19.0 allows attackers to acce

An issue in Yibin Fengguan Network Technology Co., Ltd YuPao DirectHire iOS 8.8.0 allows attackers to access sensitive u

An issue in Shandong Provincial Big Data Center AiShanDong iOS 5.0.0 allows attackers to access sensitive user informati

An issue in Qianjin Network Information Technology (Shanghai) Co., Ltd 51Job iOS 14.22.0 allows attackers to access sens

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unk

IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an ineffi

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a s

A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionS

The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboa

The Buddyboss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link_title’ parameter

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus re

The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button, WhatsApp –

The Card Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Profi

The ThemeMakers Stripe Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stripe' short

A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper input validation.

The ThemeMakers PayPal Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'paypa

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Serv

A Cross-Site Request Forgery (CSRF) vulnerability exists in the management console of WSO2 Enterprise Integrator 6.6.0 d

The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugi

Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Nam

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cro

An incorrect authorization vulnerability exists in multiple WSO2 products, allowing protected APIs to be accessed direct

The OneStore Sites plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin

The School Management System – SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions

In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is