2025

In the Linux kernel, the following vulnerability has been resolved: ext4: fix inode use after free in ext4_end_io_rsv_w

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix KMSAN uninit-value in extent_info usage

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_sync_inode_meta() s

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic in f2fs_evict_inode As sy

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe M

In the Linux kernel, the following vulnerability has been resolved: pptp: ensure minimal skb length in pptp_xmit() Com

In the Linux kernel, the following vulnerability has been resolved: spi: cs42l43: Property entry should be a null-termi

In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment(

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix client side handling of tls alerts A s

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: unlink NAPIs from queues on error to op

In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as

In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in

In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid ref leak in nfsd_open_local_fh() If tw

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix handling of server side tls alerts Sco

In the Linux kernel, the following vulnerability has been resolved: perf/core: Exit early on perf_mmap() fail When per

In the Linux kernel, the following vulnerability has been resolved: perf/core: Handle buffer mapping fail correctly in

In the Linux kernel, the following vulnerability has been resolved: perf/core: Prevent VMA split of buffer mappings Th

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference error in genera

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If clie

In the Linux kernel, the following vulnerability has been resolved: x86/sev: Evict cache lines during SNP memory valida

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Initialize frame-based format col

In the Linux kernel, the following vulnerability has been resolved: HID: apple: validate feature-report field count to

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton() against conversion to 0

In the Linux kernel, the following vulnerability has been resolved: usb: gadget : fix use-after-free in composite_dev_c

In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma->mm is freed after vma->vm_r

A flaw has been found in Linksys E5600 1.1.0.26. The affected element is the function verify_gemtek_header of the file c

A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file

EzGED3 3.5.0 stores user passwords using an insecure hashing scheme: md5(md5(password)). This hashing method is cryptogr

EzGED3 3.5.0 contains an unauthenticated arbitrary file read vulnerability due to improper access control and insufficie

Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.

A security issue has been identified in Appian Enterprise Business Process Management version 25.3. The vulnerability is

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.

A security flaw has been discovered in Scada-LTS 2.7.8.1. This affects an unknown part of the file mailing_lists.shtm. T

Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin th

MoonShine was discovered to contain a SQL injection vulnerability under the Blog -> Categories page when using the moons

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing remote attackers to upl

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.4, allowing remote attackers to sto

A Stored Cross-Site Scripting (XSS) vulnerability exists in MoonShine version < 3.12.5, allowing to execute arbitrary Ja

A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical

A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularl

A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.4.7. Affected by this

In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed b

Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replac

A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script wh

A regular expression used by AngularJS'  linky https://docs.angularjs.org/api/ngSanitize/filter/linky  filter to detect

A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges with

Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to

Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.6, 2024.Q4.0 through 2024.Q4.7, 2024.Q