CRITICAL Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: dibs: initialise dibs->lock in dibs_dev_alloc() di

In the Linux kernel, the following vulnerability has been resolved: xdp: reject clones that overrun skb_shared_info tai

In the Linux kernel, the following vulnerability has been resolved: veth: fix skb length accounting after XDP frag adju

In the Linux kernel, the following vulnerability has been resolved: tls: rx: restore msg_iter before TLS 1.3 optimistic

In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free in cifs_try_adding_

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip6ip6_err() ip6ip

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: __filemap_add_folio() restore index bef

In the Linux kernel, the following vulnerability has been resolved: sctp: keep chunk->transport in step with the list i

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk ad

In the Linux kernel, the following vulnerability has been resolved: sctp: clear new_transport when removing a peer sct

The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all ve

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant t

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe

The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in

The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity

The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authen

The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with

xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allo

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to v

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 t

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties i

Omnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. Prior to 0.3.0, PUT /ses

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6_

Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbit

Incus is a system container and virtual machine manager. Prior to version 7.3.0, a malicious image containing a `metadat

Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance across project

Incus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance to another c

Incus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of user-provided `b

Incus is a system container and virtual machine manager. Prior to version 7.2.0, an arbitrary file write exists in the I

Incus is a system container and virtual machine manager. Prior to version 7.1.0, improper validation of user-provided ba

Incus is a system container and virtual machine manager. Prior to version 7.1.0, the S3 protocol upload endpoint is vuln

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image or instance b

Incus is a system container and virtual machine manager. Prior to version 7.2.0, instance snapshots ignore the `restrict

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the `record-output` parameter of the `/

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used t

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August

Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header. The header is read directly at

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the fil

SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing aut

Improper Access Control vulnerability in Apache CloudStack's Kubernetes Service (CKS) plugin, allowing cross-tenant mani

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password func

Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery

The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulne

The arrayref crate 0.3.10 for Rust can trigger execution of malicious code when compiling a project that uses the crate,

The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the

The internment crate 0.8.7 for Rust can trigger execution of malicious code when compiling a project that uses the crate