2025

Missing Authorization vulnerability in Shakeeb Sadikeen RapidLoad unusedcss allows Exploiting Incorrectly Configured Acc

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wolfgang Include M

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Orbit Fo

Cross-Site Request Forgery (CSRF) vulnerability in Listings for Appfolio Listings for Appfolio listings-for-appfolio all

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in kendysond Payment

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs WP Project

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugin Devs Blog,

Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress & Debug a

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi aTheme

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Vayu Blo

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix the recovery flow of the UMR QP Thi

In the Linux kernel, the following vulnerability has been resolved: ipvlan: ensure network headers are in skb linear pa

In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_r

In the Linux kernel, the following vulnerability has been resolved: perf/core: Add RCU read lock protection to perf_ite

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a WARN during dereg_mr for DM type

In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_dentry_update_reval by moving d

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP hang on parent deregist

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Fix the page details for the srq crea

In the Linux kernel, the following vulnerability has been resolved: net: better track kernel sockets lifetime While ke

In the Linux kernel, the following vulnerability has been resolved: ice: Fix deinitializing VF in error path If ice_en

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enab

In the Linux kernel, the following vulnerability has been resolved: uprobes: Reject the shared zeropage in uprobe_write

In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix EFAULT handling Currently we t

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on inode when scanning ro

In the Linux kernel, the following vulnerability has been resolved: i2c: npcm: disable interrupt enable bit before devm

In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix endpoint checking in genelink_b

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit <d7416

In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk sock

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: Avoid divide by zero in table status

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: bsg: Fix crash when arpmb command

In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine

IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 throu

IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / I

In the Linux kernel, the following vulnerability has been resolved: drm/fbdev-dma: Add shadow buffering for deferred I/

In the Linux kernel, the following vulnerability has been resolved: sched/core: Prevent rescheduling when interrupts ar

IBM UrbanCode Deploy (UCD) 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0

Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a reques

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before

Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in o

A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. A

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxEl

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Graham Quick Inter

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yudleethemes City

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in victortihai Mornin

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in peregrinethemes He

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in burgersoftware Sto

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reputeinfosystems

Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization design

Cross-Site Request Forgery (CSRF) vulnerability in victoracano Cazamba cazamba allows Reflected XSS.This issue affects C