2025

Insecure Permissions vulnerability in Tenda CP3 Pro Firmware V22.5.4.93 allows the telnet service (telnetd) by default a

IBM OpenPages 9.0 is vulnerable to information disclosure of sensitive information due to a weaker than expected securit

IBM OpenPages with Watson 8.3 and 9.0 could allow an authenticated user to obtain sensitive information that should only

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the aut

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: sanitize request list handling Validate

In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cache_set_flush() 1. L

In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init

In the Linux kernel, the following vulnerability has been resolved: riscv: save the SR_SUM status over switches When t

In the Linux kernel, the following vulnerability has been resolved: btrfs: handle csum tree error with rescue=ibadroots

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9335: Fix missing free of regulato

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: free old damon_sysfs_scheme

In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Prevent overflow in size calculation for

In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: fix folio unpinning syzbot complain

In the Linux kernel, the following vulnerability has been resolved: lib/group_cpus: fix NULL pointer dereference from g

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add sanity checks for drm_edid_raw

In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handler(

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix CPER handler device confusion By insp

In the Linux kernel, the following vulnerability has been resolved: atm: clip: prevent NULL deref in clip_push() Blame

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix use-after-free in vhci_flu

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out-of-bounds read in snd_usb_

In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router por

In the Linux kernel, the following vulnerability has been resolved: userns and mnt_idmap leak in open_tree_attr(2) Onc

In the Linux kernel, the following vulnerability has been resolved: bnxt: properly flush XDP redirect lists We encount

In the Linux kernel, the following vulnerability has been resolved: atm: Release atm_dev_mutex after removing procfs in

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential deadlock when reconnecti

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences durin

In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race of userfaultfd_move and s

In the Linux kernel, the following vulnerability has been resolved: mm/shmem, swap: fix softlockup with mTHP swapin Fo

In the Linux kernel, the following vulnerability has been resolved: scsi: megaraid_sas: Fix invalid node index On a sy

In the Linux kernel, the following vulnerability has been resolved: scsi: fnic: Fix crash in fnic_wq_cmpl_handler when

A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers ca

The device has two web servers that expose unauthenticated REST APIs on the management network (TCP ports 8084 and 8086)

An unauthenticated user with management network access can get and modify the Radiflow iSAP Smart Collector (CentOS 7 -

The Linux distribution underlying the Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) is obsolete and reached end

The Linux deprivileged user vpuser in Radiflow iSAP Smart Collector (CentOS 7 - VSAP 1.20) can read the entire file syst

A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows onl

An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR AD

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this

A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an

A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical. This issue affects some

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in a

The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion d

A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical. This vulnerability

A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2. This affects the function che

A vulnerability, which was classified as problematic, has been found in FNKvision FNK-GU2 up to 40.1.7. Affected by this

A vulnerability classified as problematic was found in FNKvision FNK-GU2 up to 40.1.7. Affected by this vulnerability is

The Simple Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘slideshow’ paramete

The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover

A vulnerability classified as critical has been found in FNKvision FNK-GU2 up to 40.1.7. Affected is an unknown function

A vulnerability was found in itsourcecode Insurance Management System up to 1.0. It has been rated as critical. This iss