2025

When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can

When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. 

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undi

When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server

When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is e

When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed

When a BIG-IP APM OAuth access profile (Resource Server or Resource Client) is configured on a virtual server, undisclos

When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests

When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to by

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object use

When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Ma

When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with

When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an

When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to termi

The Woocommerce Category and Products Accordion Panel plugin for WordPress is vulnerable to Local File Inclusion in all

The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, an

The DocoDoco Store Locator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validat

The Outdoor plugin for WordPress is vulnerable to SQL Injection via the 'edit' action in all versions up to, and includi

The Find And Replace content for WordPress plugin for WordPress is vulnerable to unauthorized Stored Cross-Site Scriptin

The WPBifröst – Instant Passwordless Temporary Login Links plugin for WordPress is vulnerable to Privilege Escalation du

The Keyy Two Factor Authentication (like Clef) plugin for WordPress is vulnerable to privilege escalation via account ta

The Demo Import Kit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10. Arbitrary file may be altered b

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_ki

In the Linux kernel, the following vulnerability has been resolved: scsi: target: target_core_configfs: Add length chec

In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_

In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the helper function is valid in get_help

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: populate ndo_change_mtu() to preve

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndo_change_mtu() to prevent b

In the Linux kernel, the following vulnerability has been resolved: can: sun4i_can: populate ndo_change_mtu() to preven

In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: populate ndo_change_mtu() to prevent

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeu

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_con

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI sy

In the Linux kernel, the following vulnerability has been resolved: futex: Use correct exit on failure from futex_hash_

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensu

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta F

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There

In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font F

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors

The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'tax_query' parameter in all v

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allow