2025

In the Linux kernel, the following vulnerability has been resolved: ax25: properly unshare skbs in ax25_kiss_rcv() Ber

In the Linux kernel, the following vulnerability has been resolved: audit: fix out-of-bounds read in audit_compare_dnam

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix OOB read/write in network-coding de

In the Linux kernel, the following vulnerability has been resolved: platform/x86: asus-wmi: Fix racy registrations asu

An issue was discovered in Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01 allowing attackers to cause a denial of servic

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing

The Miniorange OTP Verification with Firebase plugin for WordPress is vulnerable to privilege escalation due to a missin

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Vizly Web D

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Beyaz Computer CityPlus

The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One c

The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True. One c

The Embed PDF for WPForms plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validati

Unsafe handling in bt_conn_tx_processor causes a use-after-free, resulting in a write-before-zero. The written 4 bytes a

Parameters are not validated or sanitized, and are later used in various internal operations.

A vulnerability was identified in the handling of Bluetooth Low Energy (BLE) fixed channels (such as SMP or ATT). Specif

The Service Finder SMS System plugin for WordPress is vulnerable to authentication bypass in all versions up to, and inc

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW . An attacker can upda

There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F . An attacker can up

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 in order to allow manage

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform manage

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a proprietary protocol on TCP port 1069 to perform manage

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management ope

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a service implementing a proprietary protocol on TCP port

Cognex In-Sight Explorer and In-Sight Camera Firmware expose a telnet-based service on port 23 to allow management oper

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credenti

A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the s

Dover Fueling Solutions ProGauge MagLink LX4 Devices fail to handle Unix time values beyond a certain point. An attacke

An attacker with adjacent access, without authentication, can exploit this vulnerability to retrieve a hard-coded passw

A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerabili

LinkAce is a self-hosted archive to collect website links. Prior to 2.3.1, a Stored Cross-Site Scripting (XSS) vulnerabi

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknow

A vulnerability was found in SourceCodester Responsive E-Learning System 1.0. This affects an unknown part of the file /

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in

Cross Site Request Forgery (CSRF) vulnerability in Smartvista BackOffice SmartVista Suite 2.2.22 via crafted GET request

In the Linux kernel, the following vulnerability has been resolved: PCI/ASPM: Disable ASPM on MFD function removal to a

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix a refcount bug in qrtr_recvmsg() Sy

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix sysfs interface lifetime The current n

In the Linux kernel, the following vulnerability has been resolved: firewire: net: fix use after free in fwnet_finish_i

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Handle enclosure with just a primary com

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't check PageError in __extent_writepage

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix warning and UAF when destroy the MR list

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xsk_diag use-after-free error during socke

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by

An issue in user interface in Kyocera Command Center RX EXOSYS M5521cdn allows remote to obtain sensitive information vi

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix attempting to call device

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix GEM handle creation ref-counting

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free We've already f