2025

The web application is susceptible to cross-site-scripting attacks. An attacker who can create new dashboards can inject

The web application is susceptible to cross-site-scripting attacks. An attacker can create a prepared URL, which injects

Multiple services of the DUT as well as different scopes of the same service reuse the same credentials.

The maxView Storage Manager does not implement sufficient measures to prevent multiple failed authentication attempts wi

Several credentials for the local PostgreSQL database are stored in plain text (partially base64 encoded).

The application is vulnerable to SQL injection attacks. An attacker is able to dump the PostgreSQL database and read its

System environment variables are recorded in Docker Desktop diagnostic logs, when using shell auto-completion. This lead

Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Sec

Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups li

In the Linux kernel, the following vulnerability has been resolved: crypto: marvell/cesa - Handle zero-length skcipher

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid using multiple devices with different

In the Linux kernel, the following vulnerability has been resolved: power: supply: max77705: Fix workqueue error handli

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Discard stale CPU state when handling

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state

In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure Whe

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: handle hdr_first_de() return value The h

In the Linux kernel, the following vulnerability has been resolved: bpf: fix ktls panic with sockmap [ 2172.936997] --

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skb_linearize

In the Linux kernel, the following vulnerability has been resolved: f2fs: zone: fix to avoid inconsistence in between S

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on sbi->total_valid_bl

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: prevent overflow in look

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for

In the Linux kernel, the following vulnerability has been resolved: clk: bcm: rpi: Add NULL check in raspberrypi_clk_re

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid re

In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: fix XQE dma address error The d

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: Abort software beacon handling if

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mm

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mm

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Avoid using sk_socket after free when

In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: fix error handling of usbnet read

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix hang when cma_netevent_callback fails

In the Linux kernel, the following vulnerability has been resolved: af_packet: move notifier's packet_dev_mc out of rcu

In the Linux kernel, the following vulnerability has been resolved: net: phy: clear phydev->devlink when the link is de

In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step

In the Linux kernel, the following vulnerability has been resolved: calipso: Don't call calipso functions for AF_INET s

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: Fix the dead loop of MPLS parse

In the Linux kernel, the following vulnerability has been resolved: soc: aspeed: Add NULL check in aspeed_lpc_enable_sn

In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovo_se30_wdt: Fix possible devm_iorema

In the Linux kernel, the following vulnerability has been resolved: backlight: pm8941: Add NULL check in wled_configure

In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus-ec-sensors) check sensor index in read

In the Linux kernel, the following vulnerability has been resolved: dm: fix dm_blk_report_zones If dm_get_live_table()

In the Linux kernel, the following vulnerability has been resolved: dm: limit swapping tables for devices with zone wri

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting t

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udma_probe() devm

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when un

In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Reorder clock handling and powe

In the Linux kernel, the following vulnerability has been resolved: serial: Fix potential null-ptr-deref in mlb_usio_pr

In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in usb_

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4851: fix ad4858 chan pointer handling

In the Linux kernel, the following vulnerability has been resolved: coresight: holding cscfg_csdev_lock while removing