2025

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.

In the Linux kernel, the following vulnerability has been resolved: io_uring/eventfd: ensure io_eventfd_signal() defers

Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signat

This vulnerability exists in the CP Plus Router due to insecure handling of cookie flags used within its web interface.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: adapt set backend to use GC t

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to information leakage risk.

The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database

The a+HRD from aEnrich Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject

The a+HRD from aEnrich Technology has a Server-side Request Forgery, allowing unauthenticated remote attackers to exploi

A vulnerability classified as critical was found in itsourcecode Farm Management System up to 1.0. This vulnerability af

A vulnerability classified as problematic has been found in CampCodes School Management Software 1.0. This affects an un

A vulnerability was found in Shiprocket Module 3 on OpenCart. It has been rated as critical. Affected by this issue is s

A vulnerability was found in Shiprocket Module 3/4 on OpenCart. It has been declared as critical. Affected by this vulne

A vulnerability has been found in obsproject OBS Studio up to 30.0.2 on Windows and classified as problematic. Affected

The a+HRD from aEnrich Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote at

A vulnerability was found in Facile Sistemas Cloud Apps up to 20250107. It has been classified as problematic. Affected

A vulnerability was found in Mobotix M15 4.3.4.83 and classified as problematic. This issue affects some unknown process

A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnera

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inje

IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connect

IBM TXSeries for Multiplatforms 10.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker

In the Linux kernel, the following vulnerability has been resolved: dm array: fix releasing a faulty array block twice

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix enomem handling in buffered reads If ne

In the Linux kernel, the following vulnerability has been resolved: nfs: Fix oops in nfs_netfs_init_request() when copy

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private->all_drm_private[i]->drm

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix a missing return value check bug In the

In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file hand

In the Linux kernel, the following vulnerability has been resolved: btrfs: zlib: fix avail_in bytes for s390 zlib HW co

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml c

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add a lock when accessing the buddy tri

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix divide error in DM plane scale

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix page fault due to max surface

In the Linux kernel, the following vulnerability has been resolved: topology: Keep the cpumask unchanged when printing

In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kernel panic dur

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Remove WARN_ON in functionfs_bin

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: zpa2326: fix information leak in tri

In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iio_simply_dummy_buffer: fix informatio

In the Linux kernel, the following vulnerability has been resolved: iio: light: vcnl4035: fix information leak in trigg

In the Linux kernel, the following vulnerability has been resolved: iio: light: bh1745: fix information leak in trigger

In the Linux kernel, the following vulnerability has been resolved: iio: imu: kmx61: fix information leak in triggered

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rockchip_saradc: fix information leak in

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads8688: fix information leak in trigg

In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1119: fix information leak in trigg

In the Linux kernel, the following vulnerability has been resolved: iio: adc: at91: call input_free_device() on allocat

In the Linux kernel, the following vulnerability has been resolved: ovl: support encoding fid from inode with no alias

In the Linux kernel, the following vulnerability has been resolved: net_sched: cls_flow: validate TCA_FLOW_RSHIFT attri

In the Linux kernel, the following vulnerability has been resolved: ipvlan: Fix use-after-free in ipvlan_get_iflink().

In the Linux kernel, the following vulnerability has been resolved: net: hns3: don't auto enable misc vector Currently