2025

In the Linux kernel, the following vulnerability has been resolved: smc: Use __sk_dst_get() and dst_dev_rcu() in in smc

In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU in ip6_xmit() Use RCU in ip6_xmit()

In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptc

In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-length

In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{fr

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall comp

In the Linux kernel, the following vulnerability has been resolved: scsi: pm80xx: Fix array-index-out-of-of-bounds on r

In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Fix array underflow in pci

In the Linux kernel, the following vulnerability has been resolved: sparc: fix accurate exception reporting in copy_{fr

The Easy Email Subscription plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter i

Unrestricted Upload of File with Dangerous Type vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows a

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in DivvyDrive

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

Apache OpenOffice documents can contain links to other files. A missing Authorization vulnerability in Apache OpenOffice

Apache OpenOffice Calc spreadsheet can contain links to other files, in the form of "external data sources". A missing A

Apache OpenOffice documents can contain links. A missing Authorization vulnerability in Apache OpenOffice allowed an att

The Payment Plugins Braintree For WooCommerce plugin for WordPress is vulnerable to authorization bypass due to a missin

The Booking Calendar | Appointment Booking | Bookit plugin for WordPress is vulnerable to unauthorized modification of d

The Team Members Showcase WordPress plugin before 3.5.0 does not sanitize and escape a parameter before outputting it ba

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix Use-after-free in validation Nodes

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbi

Substance3D - Stager versions 3.1.5 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability

Substance3D - Stager versions 3.1.5 and earlier are affected by a Use After Free vulnerability that could result in arbi

Substance3D - Stager versions 3.1.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a craft

A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions <

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA2) (All versions), LOGO! 12/24RCEo (6ED1052-2MD0

A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly

A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 11). Affected applications do not

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP12 Update 2). The affected application i

Format Plugins versions 1.1.1 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted fil

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i

Format Plugins versions 1.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result i

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could levera

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code CoPilot Chat E

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a net

Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provis

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (onli

Improper neutralization of input during web page generation ('cross-site scripting') in Dynamics 365 Field Service (onli

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.