2025

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to

A command injection vulnerability exists in the eScan Web Management Console version 5.5-2. The application fails to pro

A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W21

A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the insta

An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier. The mobile/index.php e

A stack-based buffer overflow vulnerability exists in i-Ftp version 2.20 due to improper handling of the Time attribute

An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1. The application’s upload.php

A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function o

A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLang

A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. U

Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethe

CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter.

In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job

In the Linux kernel, the following vulnerability has been resolved: riscv: vector: Fix context save/restore with xthead

In the Linux kernel, the following vulnerability has been resolved: Revert "riscv: Define TASK_SIZE_MAX for __access_ok

In the Linux kernel, the following vulnerability has been resolved: riscv: fix runtime constant support for nommu kerne

In the Linux kernel, the following vulnerability has been resolved: net: netpoll: Initialize UDP checksum field before

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlink

In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in ims_pcu_flash

In the Linux kernel, the following vulnerability has been resolved: video: screen_info: Relocate framebuffers behind PC

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add basic validation for RAS header If

In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: check msg length in SMBUS block read F

In the Linux kernel, the following vulnerability has been resolved: perf: Fix sample vs do_exit() Baisheng Gao reporte

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator

In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Modify the EEPROM and OTP size for PC

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmf: Use device managed allocatio

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: do not ping device which has failed

CNCF Harbor 2.13.x before 2.13.1 and 2.12.x before 2.12.4 allows information disclosure by administrators who can exploi

The default configuration in ETSI Open-Source MANO (OSM) v.14.x, v.15.x, v.16.x, v.17.x does not impose any restrictions

An issue in ETSI Open-Source MANO (OSM) 14.0.x before 14.0.3, 15.0.x before 15.0.2, 16.0.0, and 17.0.0 allows a remote a

A vulnerability was found in PHPGurukul Login and User Management System 3.3. It has been declared as critical. This vul

Apwide Golive 10.2.0 Jira plugin allows Server-Side Request Forgery (SSRF) via the test webhook function.

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass au

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Cleanup acquired resources when r

In the Linux kernel, the following vulnerability has been resolved: remoteproc: core: Release rproc->clean_table after

In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success

In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition f

In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block r

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs reques

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In

In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path

In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers pr

In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet r