2025

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products a

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.

Infoblox NIOS through 8.6.4 executes with more privileges than required.

ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.

GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerabili

An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically

Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.

In Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which ma

In XIQ-SE before 24.2.11, a low-privileged user may be able to access admin passwords, which could lead to privilege esc

In XIQ-SE before 24.2.11, a server misconfiguration may allow user enumeration when specific conditions are met.

GFast between v2 to v3.2 was discovered to contain a SQL injection vulnerability via the OrderBy parameter at /system/op

Buffer Overflow vulnerability in Vigor2620/LTE200 3.9.8.9 and earlier and Vigor2860/2925 3.9.8 and earlier and Vigor2862

Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3

An issue in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior t

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620

A NULL pointer dereference in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vi

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vi

Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vi

elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplie

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix a use of uninitialized mutex comm

In the Linux kernel, the following vulnerability has been resolved: batman-adv: Drop unmanaged ELP metric worker The E

In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If

In the Linux kernel, the following vulnerability has been resolved: fbdev: omap: use threaded IRQ for LCD DMA When usi

In the Linux kernel, the following vulnerability has been resolved: tty: xilinx_uartps: split sysrq handling lockdep d

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amd/display: Use HW lock mgr for PSR1"

In the Linux kernel, the following vulnerability has been resolved: block: mark GFP_NOIO around sysfs ->store() sysfs

In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after

In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warnin

In the Linux kernel, the following vulnerability has been resolved: ptp: Ensure info->enable callback is always set Th

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connectio

In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev->ax25_ptr syzbot found a loc

In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active re

In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences i

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback

In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs

In the Linux kernel, the following vulnerability has been resolved: block: fix queue freeze vs limits lock order in sys

In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero Th

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is

In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fix incorrect variable used when call

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix warnings during S3 suspend The enab

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling

In the Linux kernel, the following vulnerability has been resolved: net: ravb: Fix missing rtnl lock in suspend/resume

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix definer's HWS_SET32 macro for ne

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix freeing IRQ in am

In the Linux kernel, the following vulnerability has been resolved: firewire: test: Fix potential null dereference in f

In the Linux kernel, the following vulnerability has been resolved: rhashtable: Fix potential deadlock by moving schedu

In the Linux kernel, the following vulnerability has been resolved: memory: tegra20-emc: fix an OF node reference bug i