2025

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signat

The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploi

A vulnerability classified as critical was found in itsourcecode Farm Management System up to 1.0. This vulnerability af

A vulnerability was found in Shiprocket Module 3 on OpenCart. It has been rated as critical. Affected by this issue is s

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected

The a+HRD from aEnrich Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote at

A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown process

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copy

In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file hand

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW co

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml c

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kernel panic dur

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bin

In the Linux kernel, the following vulnerability has been resolved: ovl: support encoding fid from inode with no alias

In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attri

In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when 1588 is sent on HI

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: clamp maximum hashtable size

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Only disable IRQ1 wakeup wher

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC f

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib needs to be a

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: sched: avoid using current->nsproxy

In the Linux kernel, the following vulnerability has been resolved: mptcp: sysctl: blackhole timeout: avoid using curre

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: rto_min/max: avoid using current->nsp

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: plpmtud_probe_interval: avoid using c

In the Linux kernel, the following vulnerability has been resolved: rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using curr

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: remove kernfs active break A warnin

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure shadow stack is active before "gett

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unkn

The Import any XML or CSV File to WordPress PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SV

IBM Security ReaQta 3.12 could allow an authenticated user to perform unauthorized actions due to reliance on untrusted

IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 could disclose sensitive IP address information to authe

IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could

A vulnerability was found in code-projects Fantasy-Cricket 1.0. It has been classified as critical. Affected is an unkno

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unkn

A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability

IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and IBM Robotic Process Automation

IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Call

IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information fro

IBM Robotic Process Automation 21.0.0 through 21.0.7.17 and 23.0.0 through 23.0.18 could allow a local user to escalate

IBM App Connect Enterprise 12.0.1.0 through 12.0.7.0and 13.0.1.0 under certain configurations could allow a privileged u

A vulnerability classified as critical was found in TDuckCloud tduck-platform up to 4.0. This vulnerability affects the

A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Ed

The Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Stored Cross-Site Sc

The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme theme for WordPress is vulnerable to unauthorize

The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘list_tag’ parameter in all vers

The MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Stored Cros

The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored