2025

Dradis through 4.16.0 allows referencing external images (resources) over HTTPS, instead of forcing the use of embedded

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connecti

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset me

The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputSt

The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a

In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo

Tunnelblick 3.5beta06 before 7.0, when incompletely uninstalled, allows attackers to execute arbitrary code as root (upo

The agent in Quest KACE Systems Management Appliance (SMA) before 14.0.97 and 14.1.x before 14.1.19 potentially allows p

NetAlertX is a network, presence scanner, and alert framework. Prior to version 25.6.7, a vulnerability in the authentic

A vulnerability has been found in IROAD Dashcam Q9 up to 20250624 and classified as problematic. Affected by this vulner

The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to versi

The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to versi

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FS__sect_link

A vulnerability, which was classified as problematic, has been found in HDF5 1.14.6. This issue affects the function H5F

Zipkin through 3.5.1 has a /heapdump endpoint (associated with the use of Spring Boot Actuator), a similar issue to CVE-

A vulnerability classified as problematic was found in HDF5 1.14.6. This vulnerability affects the function H5FS__sinfo_

SetTranslationHandler.php does not validate that the user is an election admin, allowing any (even unauthenticated) user

User-controlled inputs are improperly escaped in: * VotePage.php (poll option input) * ResultPage::getPag

ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage#executeClear() do not validate request methods or CSRF toke

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia F

Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Excessive Al

Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtls_pem_read_buffer and two mbedtls

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may b

In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer is at least 4 bytes be

In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash computation fails and internal e

OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Corte

In the Linux kernel, the following vulnerability has been resolved: sched/rt: Fix race in push_rt_task Overview ======

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatc

In the Linux kernel, the following vulnerability has been resolved: NFSD: fix race between nfsd registration and export

In the Linux kernel, the following vulnerability has been resolved: nfsd: Initialize ssc before laundromat_work to prev

In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write f

In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak in

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of

In the Linux kernel, the following vulnerability has been resolved: media: vivid: Change the siize of the composing sy

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Cleanup after an allocation error

In the Linux kernel, the following vulnerability has been resolved: can: kvaser_pciefd: refine error prone echo_skb_max

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with una

In the Linux kernel, the following vulnerability has been resolved: ext4: inline: fix len overflow in ext4_prepare_inli

In the Linux kernel, the following vulnerability has been resolved: ext4: fix out of bounds punch offset Punching a ho

In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regula

In the Linux kernel, the following vulnerability has been resolved: f2fs: prevent kernel warning due to negative i_nlin

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sit_bitmap_size w/

In the Linux kernel, the following vulnerability has been resolved: hwmon: (ftsteutates) Fix TOCTOU race in fts_read()

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for a

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_set_var to prevent null-ptr-deref in

In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after

In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsm_op