2025

In the Linux kernel, the following vulnerability has been resolved: xsk: fix refcount underflow in error path Fix a re

In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hie

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free read in ext4_find_extent f

In the Linux kernel, the following vulnerability has been resolved: hfs: fix OOB Read in __hfs_brec_find Syzbot report

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: fix memory corruption in ioctl If

In the Linux kernel, the following vulnerability has been resolved: xfrm: Update ipcomp_scratches with NULL when freed

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzb

The Academy LMS – WordPress LMS Plugin for Complete eLearning Solution plugin for WordPress is vulnerable to privilege e

Encrypted WiFi and SSH credentials were found in the Ghost Robotics Vision 60 v0.27.2 APK. This vulnerability allows an

An unauthenticated remote attacker can crash the wscserver by sending incomplete SOAP requests. The wscserver process wi

The wsc server uses a hard-coded certificate to check the authenticity of SOAP messages. An unauthenticated remote attac

A low privileged remote attacker can corrupt the webserver users storage on the device by setting a sequence of unsuppor

Mercku M6a devices through 2.1.0 allow root TELNET logins via the web admin password.

Mercku M6a devices through 2.1.0 allow password changes via intranet CSRF attacks.

Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a comm

Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /ce

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servic

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Block Storage). The suppor

Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.7.3.0.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servic

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). S

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics W

Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported version

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servic

The administrator password setting of the D-Link DIR-820L 1.06B02 is has Improper Access Control and is vulnerable to Un

Cross site scripting vulnerability in Moodle GeniAI plugin (local_geniai) 2.3.6. An authenticated user with Teacher role

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 co

QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypass

The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other

GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

This High severity DoS (Denial of Service) vulnerability was introduced in version 2.0 of Confluence Data Center. Thi

A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attacker

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized

Zohocorp ManageEngine ADManager Plus version before 8024 are vulnerable to authenticated command injection vulnerability

Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key u

All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This a

The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TC

EasyFlow .NET and EasyFlow AiNet, developed by Digiwin, has a Missing Authentication vulnerability, allowing unauthentic

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series fi

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, US

A command injection vulnerability may be exploited after the admin's authentication on the web portal on Omada gateways.

An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.