2025

In the Linux kernel, the following vulnerability has been resolved: fuse: fix runtime warning on truncate_folio_batch_e

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Explicitly exit CT safe mode on unwind

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on devi

In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediat

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device

A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic. Affected by this vulnerability

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Techno

Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This

NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably c

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability a

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an un

The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capabi

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is s

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulne

A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unkn

A vulnerability, which was classified as critical, has been found in itsourcecode Insurance Management System 1.0. This

The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability

The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_g

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability a

A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2. This affects the function get

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it bac

A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is

A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is

A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back

A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de4

A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. This vulnerability affects unknown cod

Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate

A vulnerability classified as critical has been found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of t

hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.

The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldu

The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sa

The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalatio

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some

OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search

HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configu

HCL IEM is affected by a password in cleartext vulnerability.  Sensitive information is transmitted without adequate pro

HCL IEM is affected by a concurrent login vulnerability.  The application allows multiple concurrent sessions using the

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerabil

An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to

HCL IEM is affected by an authorization token sent in cookie vulnerability.  A token used for authentication and authori

HCL IEM is affected by an improper invalidation of access or JWT token vulnerability.  A token was not invalidated which

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge dev

Node-SAML is a SAML library not dependent on any frameworks that runs in Node. In versions 5.0.1 and below, Node-SAML lo

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central serv

The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4

This Medium severity ACE (Arbitrary Code Execution) vulnerability was introduced in version 4.2.8 of Sourcetree for Mac.

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown fu

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web,