HIGH Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: sctp: fix OOB write to userspace in sctp_getsockopt

In the Linux kernel, the following vulnerability has been resolved: pppoe: drop PFC frames RFC 2516 Section 7 states t

In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flori

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix potential NULL derefe

In the Linux kernel, the following vulnerability has been resolved: fs/adfs: validate nzones in adfs_validate_bblk() R

In the Linux kernel, the following vulnerability has been resolved: sched/psi: fix race between file release and pressu

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_lis

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq v

In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a po

In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_xmi

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_i

In the Linux kernel, the following vulnerability has been resolved: bonding: 3ad: implement proper RCU rules for port->

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix strparser anchor skb leak on offload

In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private de

In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Fix potential use-after-free in get_

In the Linux kernel, the following vulnerability has been resolved: KVM: Reject wrapped offset in kvm_reset_dirty_gfn()

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: fix GAIT table indexing due to doub

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read

In the Linux kernel, the following vulnerability has been resolved: ceph: fix a buffer leak in __ceph_setxattr() The o

In the Linux kernel, the following vulnerability has been resolved: ceph: put folios not suitable for writeback The ba

In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page or

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential null-ptr-deref in decode_cho

In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in __ce

In the Linux kernel, the following vulnerability has been resolved: libceph: handle rbtree insertion error in decode_ch

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix oops due to out of scope access Be

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARN_ON in __iommu_group_set_domain_nofa

In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races Ther

In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry does

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UA

In the Linux kernel, the following vulnerability has been resolved: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync s

In the Linux kernel, the following vulnerability has been resolved: Revert "wireguard: device: enable threaded NAPI" T

Apple M1 GPUs retain register file data between compute shader dispatches from different processes. A sandboxed Metal at

An unauthorized user can modify configuration through API calls that affects the OpenText Access Manager. This issue aff

Jenkins Assembla Plugin 1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks,

Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned

Jenkins External Workspace Manager Plugin 1.3.2 and earlier does not reject path traversal sequences in the custom works

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carr

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users

Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1)

n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allow

Flowise before 3.1.0 (versions 3.0.13 and earlier) contains a missing authentication vulnerability in the /api/v1/loginm

Capgo before 12.128.2 allows direct patching of public.apps.owner_org through PostgREST, bypassing the transfer_app() wo

Capgo before 12.128.2 enforces mandatory two-factor authentication only at the UI level. Sensitive Organization (ORG) ma

Supabase Capgo before 12.128.2 contains an authorization bypass vulnerability in the SECURITY DEFINER record_build_time

Capgo before 12.128.2 allows non-admin API keys to read webhook signing secrets via Supabase REST due to insufficient ro

Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps constraints on subkeys provided via x-limited

Capgo before 12.128.2 contains a broken object level authorization (BOLA) vulnerability in the POST /build/start/:jobId

Capgo before 12.128.2 contains a cross-domain SSO account takeover vulnerability in the provision-user endpoint that all

The AdRotate Banner Manager plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and includin