2025

Hubble is a fully distributed networking and security observability platform for cloud native workloads. Prior to versio

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_gl

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_p

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_m

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_rem

FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function.

A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execu

A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some

containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0.

The affected products could allow an unauthenticated attacker to access system information that could enable further acc

In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API

In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page

In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible

In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible

In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible

In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning

vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 tha

Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `Lanc

Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `Tabl

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf

In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart

In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling

In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck co

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers o

In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_

In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in

In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inod

This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and

D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting spe

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work Th

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for

In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() er

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overf

In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock()

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Disable iocc if dma-coherent pro

In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device(

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during mul

In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer de

In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm

In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm

In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This p

In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_C

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml h

An authenticated user can modify application state data.