2025

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: smscufx: Fix null-ptr-deref in ufx_us

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: rpmpd: Check for null return of devm_kca

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-compress: prevent the potentially use of

In the Linux kernel, the following vulnerability has been resolved: udmabuf: validate ubuf->pagecount Syzbot has repor

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a memory leak in 'host1x_remove()'

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E

In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: calculate the right b

In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc

In the Linux kernel, the following vulnerability has been resolved: media: ir_toy: free before error exiting Fix leak

In the Linux kernel, the following vulnerability has been resolved: video: fbdev: cirrusfb: check pixclock to avoid div

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix deadlock in concurrent rename whiteout a

In the Linux kernel, the following vulnerability has been resolved: powerpc/set_memory: Avoid spinlock recursion in cha

In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer derefer

A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if t

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lea

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php.

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via n

Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via n

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cro

Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclos

Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure v

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of informatio

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privile

GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debu

GLPI is a free asset and IT management software package. Starting in version 0.72 and prior to version 10.0.18, an anony

GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted t

GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anony

A vulnerability was found in GLPI up to 10.0.17. It has been declared as problematic. Affected by this vulnerability is

Missing Authorization vulnerability in George Pattichis Simple Photo Feed simple-photo-feed allows Exploiting Incorrectl

Missing Authorization vulnerability in Anton Vanyukov Market Exporter market-exporter allows Exploiting Incorrectly Conf

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wired Impact Wired

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality N

Authorization Bypass Through User-Controlled Key vulnerability in ameliabooking Amelia ameliabooking allows Exploiting I

Cross-Site Request Forgery (CSRF) vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.Th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Easy Cont

Missing Authorization vulnerability in enituretechnology Small Package Quotes – Unishippers Edition small-package-quotes

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Business

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Team Sect

Missing Authorization vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Services

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Info Card

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Counters

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Countdown

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Icon List

Missing Authorization vulnerability in Xfinitysoft Order Limit for WooCommerce wc-order-limit-lite allows Exploiting Inc

Cross-Site Request Forgery (CSRF) vulnerability in fs-code Booknetic booknetic.This issue affects Booknetic: from n/a th

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in webandprint AR For