2025

In the Linux kernel, the following vulnerability has been resolved: blk-iocost: fix divide by 0 error in calc_lcoefs()

In the Linux kernel, the following vulnerability has been resolved: dccp: Fix out of bounds access in DCCP error handle

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in tcp_write_timer_handler(

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix FCLK pstate change underflow

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Clean up integer overflow checking in m

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on dedupli

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Clear nfc_target before being used Fix

In the Linux kernel, the following vulnerability has been resolved: ppp: associate skb with a device at tx Syzkaller t

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix panic due to wrong pageattr of im->image

In the Linux kernel, the following vulnerability has been resolved: mmc: atmel-mci: fix return value check of mmc_add_h

In the Linux kernel, the following vulnerability has been resolved: uio: uio_dmem_genirq: Fix missing unlock in irq con

In the Linux kernel, the following vulnerability has been resolved: ethtool: eeprom: fix null-deref on genl_info in dum

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference state management for synchronous

In the Linux kernel, the following vulnerability has been resolved: power: supply: adp5061: fix out-of-bounds read in a

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix recursive locking direct_mutex in ftrac

In the Linux kernel, the following vulnerability has been resolved: RISC-V: Make port I/O string accessors actually wor

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix possible memory leak in hpsa_init_o

In the Linux kernel, the following vulnerability has been resolved: EDAC/i10nm: fix refcount leak in pci_get_dev_wrappe

In the Linux kernel, the following vulnerability has been resolved: clk: ti: dra7-atl: Fix reference leak in of_dra7_at

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix xid leak in cifs_copy_file_range() If th

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_typec: zero out stale poin

In the Linux kernel, the following vulnerability has been resolved: HSI: omap_ssi: Fix refcount leak in ssi_probe When

In the Linux kernel, the following vulnerability has been resolved: mmc: core: Fix kernel panic when remove non-standar

In the Linux kernel, the following vulnerability has been resolved: io-wq: Fix memory leak in worker creation If the C

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on in __es_tree_search caused by bad

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom-hw: Fix memory leak in qcom_cpufreq_h

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_device_is_present() for VFs by checkin

In the Linux kernel, the following vulnerability has been resolved: powerpc/kprobes: Fix null pointer reference in arch

In the Linux kernel, the following vulnerability has been resolved: power: supply: cw2015: Fix potential null-ptr-deref

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: qcom: Fix memory leak in dwc3_qcom_inter

In the Linux kernel, the following vulnerability has been resolved: drivers: perf: marvell_cn10k: Fix hotplug callback

In the Linux kernel, the following vulnerability has been resolved: RISC-V: kexec: Fix memory leak of fdt buffer This

Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks

NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to Reflected XSS through its ui.add_css,

WBCE CMS is a content management system. Version 1.6.4 contains a brute-force protection bypass where an attacker can in

Astro is a web framework. Versions 5.15.7 and below have a double URL encoding bypass which allows any unauthenticated a

n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Comm

Tuleap is a free and open source suite for management of software development and collaboration. Versions of Tuleap Comm

Tuleap is a free and open source suite for management of software development and collaboration. Tuleap Community Editon

Tuleap is an Open Source Suite for management of software development and collaboration. Tuleap Community Edition versio

Tuleap is an Open Source Suite for management of software development and collaboration. Versions below 17.0.99.17624313

IBM watsonx.data 2.2 through 2.2.1 could allow an authenticated user to cause a denial of service through ingestion pods

IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files.

c-ares is an asynchronous resolver library. Versions 1.32.3 through 1.34.5 terminate a query after maximum attempts whe

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user t

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 stores unencrypted sensitive in

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow an authenticated us

IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 is vulnerable to creation of te

A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. Impacted is an unknown function of the file /