2025

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix slab-use-after-free Read in rxe_queue

In the Linux kernel, the following vulnerability has been resolved: nfs: handle failure of nfs_get_lock_context in unlo

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix "KASAN: slab-use-after-free Read in

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check of pipe_ctx->plane_

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink repres

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix use-after-free when del

In the Linux kernel, the following vulnerability has been resolved: net/tls: fix kernel panic when alloc_page failed W

In the Linux kernel, the following vulnerability has been resolved: fs/eventpoll: fix endless busy loop after timeout h

In the Linux kernel, the following vulnerability has been resolved: HID: bpf: abort dispatch if device destroyed The c

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix memory leak in error handling

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxd_cle

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Set n_channels after allocating str

In the Linux kernel, the following vulnerability has been resolved: sched_ext: bpf_iter_scx_dsq_new() should always ini

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: csa unmap use uninterruptible lock Aft

In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Use a bitmask for UTMI pad power

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: disable napi on driver removal A warni

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix race condition in unaccepted mem

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: Add NULL check in uclogic_input_confi

In the Linux kernel, the following vulnerability has been resolved: net: mctp: Don't access ifa_index when missing In

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Add missing locking Recent

Missing Authorization vulnerability in Cloudways Breeze breeze allows Exploiting Incorrectly Configured Access Control S

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to

Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIB

The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit plugin for Word

The tarteaucitron.io WordPress plugin before 1.9.5 uses query parameters from YouTube oEmbed URLs without sanitizing the

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an at

Lychee is a free photo-management tool. In versions starting from 6.6.6 to before 6.6.10, an attacker can leak local fil

The Pixabay Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in t

The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A succ

Dify is an open-source LLM app development platform. In version 1.2.0, there is insufficient filtering of user input by

Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a

conda-smithy is a tool for combining a conda recipe with configurations to build using freely hosted CI services into a

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that cou

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that cou

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to e

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentica

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to ac

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to e

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentic

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentica

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentica

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate pr

Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege E

Fuji Electric Smart Editor is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary cod

Fuji Electric Smart Editor is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitr

Fuji Electric Smart Editor is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow