2025

Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypass

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challe

IBM Informix Dynamic Server 12.10 and 14.10 is vulnerable to HTML injection. A remote attacker could inject malicious HT

IBM Informix Dynamic Server 12.10 and 14.10 uses an inadequate account lockout setting that could allow a remote attacke

CodeIgniter is a PHP full-stack web framework. A command injection vulnerability present in versions prior to 4.6.2 affe

iSTAR Ultra performs a firmware verification on boot, however the verification does not inspect certain portions of the

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default crede

Insufficient input validation within GitLab Language Server 7.6.0 and later before 7.30.0 allows arbitrary GraphQL query

OS Command Injection in iSTAR Ultra products web application allows an authenticated attacker to gain even more privileg

A reflected cross-site scripting (xss) vulnerability exists in the radiationDoseReport.php functionality of meddream Med

An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires devic

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a phy

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. When a new SD card is inserted into the dashcam, the

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840.

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDrea

A server-side request forgery vulnerability exists in the cecho.php functionality of MedDream PACS Premium 7.3.5.860. A

A vulnerability, which was classified as problematic, has been found in bsc Peru Cocktails App 1.0.0 on Android. Affecte

In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escala

A flaw was found in GLib. A denial of service on Windows platforms may occur if an application attempts to spawn a progr

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this

Incorrect Use of Privileged APIs vulnerability in Beamsec PhishPro allows Privilege Abuse. This issue affects PhishPro:

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: configfs: Fix OOB read on empty string

In the Linux kernel, the following vulnerability has been resolved: dm-bufio: fix sched in atomic context If "try_veri

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can c

In the Linux kernel, the following vulnerability has been resolved: HID: core: do not bypass hid_hw_raw_request hid_hw

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix crash in timerlat_dump_stack()

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix race between cache write completion and

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision a

In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_pag

In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Fix bpf_arch_text_poke() with new_addr ==

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message wh

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: lpc-snoop: Don't disable channels that

In the Linux kernel, the following vulnerability has been resolved: soundwire: Revert "soundwire: qcom: Add set_channel

In the Linux kernel, the following vulnerability has been resolved: iio: accel: fxls8962af: Fix use after free in fxls8

In the Linux kernel, the following vulnerability has been resolved: iio: backend: fix out-of-bound write The buffer is

In the Linux kernel, the following vulnerability has been resolved: comedi: das16m1: Fix bit shift out of bounds When

In the Linux kernel, the following vulnerability has been resolved: comedi: das6402: Fix bit shift out of bounds When

In the Linux kernel, the following vulnerability has been resolved: comedi: Fail COMEDI_INSNLIST ioctl if n_insns is to

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized data in insn_rw_em

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix initialization of data for instructions

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggre

In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Ru

In the Linux kernel, the following vulnerability has been resolved: smc: Fix various oops due to inet_sock type confusi

In the Linux kernel, the following vulnerability has been resolved: usb: net: sierra: check for no status endpoint The

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal o

In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock Af

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of togglin

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen

In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encount