2025

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix deadlock in concurrent rename whiteout a

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix read out-of-bounds in ubifs_wbuf_write_n

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix to add refcount once page is set private

In the Linux kernel, the following vulnerability has been resolved: ubi: Fix race condition between ctrl_cdev_ioctl and

In the Linux kernel, the following vulnerability has been resolved: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111

In the Linux kernel, the following vulnerability has been resolved: powerpc/set_memory: Avoid spinlock recursion in cha

In the Linux kernel, the following vulnerability has been resolved: ARM: davinci: da850-evm: Avoid NULL pointer derefer

A Broken Authorization schema exists where any authenticated user could download IOA script and configuration files if t

A Credential Disclosure vulnerability exists where an administrator could extract the stored SMTP account credentials du

HCL MyCloud is affected by Improper Access Control - an unauthenticated privilege escalation vulnerability which may lea

Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.

Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php.

Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.

Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php.

Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the d

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php.

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attacke

Improper Input Validation vulnerability in The Document Foundation LibreOffice allows Windows Executable hyperlink targ

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like sys

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a c

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a c

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause a NULL p

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-o

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-

NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bou

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could cause an out-o

NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could cause an out-

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via n

Buffer overflow in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via

Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via n

NVIDIA Jetson Linux and IGX OS image contains a vulnerability in the UEFI firmware RCM boot mode, where an unprivileged

matrix-appservice-irc is a Node.js IRC bridge for Matrix. The matrix-appservice-irc bridge up to version 3.0.3 contains

LocalSend is a free, open-source app that allows users to securely share files and messages with nearby devices over the

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cro

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurit

Incorrect ownership assignment in some Zoom Workplace Apps may allow a privileged user to conduct an information disclos

Incorrect user management in some Zoom Workplace Apps may allow a privileged user to conduct an information disclosure v

Business logic error in some Zoom Workplace Apps may allow an unauthenticated user to conduct a disclosure of informatio

Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network acce

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privile

RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. Versions 0.15.1 and prior are vulnerable to SQL i

Improper access control in mail module of Odoo Community 17.0 and Odoo Enterprise 17.0 allows remote authenticated attac

GLPI is a free asset and IT management software package. Prior to version 10.0.18, a low privileged user can enable debu

GLPI is a free asset and IT management software package. Starting in version 9.5.0 and prior to version 10.0.18, if a "M

Improper access control in the auth_oauth module of Odoo Community 15.0 and Odoo Enterprise 15.0 allows an internal user

The "update" binary in the firmware of the affected product sends attempts to mount to a hard-coded, routable IP address