MEDIUM Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: avoid scheduling in rtas_os_term() I

In the Linux kernel, the following vulnerability has been resolved: mtd: lpddr2_nvm: Fix possible null-ptr-deref It wi

In the Linux kernel, the following vulnerability has been resolved: media: coda: Add check for dcoda_iram_alloc As the

In the Linux kernel, the following vulnerability has been resolved: netdevsim: fix memory leak in nsim_drv_probe() when

In the Linux kernel, the following vulnerability has been resolved: eth: alx: take rtnl_lock on resume Zbynek reports

In the Linux kernel, the following vulnerability has been resolved: thermal: intel_powerclamp: Use get_cpu() instead of

In the Linux kernel, the following vulnerability has been resolved: coresight: cti: Fix hang in cti_disable_hw() cti_e

In the Linux kernel, the following vulnerability has been resolved: drm/mipi-dsi: Detach devices when removing the host

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcp_ndo_sta

In the Linux kernel, the following vulnerability has been resolved: ext4: add EXT4_IGET_BAD flag to prevent unexpected

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix potential memory leaks When t

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clean up si_domain in the init_dmars()

In the Linux kernel, the following vulnerability has been resolved: cxl: fix possible null-ptr-deref in cxl_guest_init_

In the Linux kernel, the following vulnerability has been resolved: memory: pl353-smc: Fix refcount leak bug in pl353_s

In the Linux kernel, the following vulnerability has been resolved: drm/amd: fix potential memory leak This patch fix

In the Linux kernel, the following vulnerability has been resolved: rtc: class: Fix potential memleak in devm_rtc_alloc

In the Linux kernel, the following vulnerability has been resolved: ntb_netdev: Use dev_kfree_skb_any() in interrupt co

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Make sure "ib_port" is valid when access

In the Linux kernel, the following vulnerability has been resolved: macintosh: fix possible memory leak in macio_add_on

In the Linux kernel, the following vulnerability has been resolved: cpufreq: Init completion before kobject_init_and_ad

In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: Accommodate VMA splitting Prior to thi

In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues

In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against devi

In the Linux kernel, the following vulnerability has been resolved: dm-stripe: fix a possible integer overflow There's

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dere

In the Linux kernel, the following vulnerability has been resolved: net: rfkill: gpio: Fix crash due to dereferencering

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Always pass in an error pointer to __

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to R

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to C

The Contest Gallery – Upload, Vote & Sell with PayPal and Stripe plugin for WordPress is vulnerable to Stored Cross-Site

The Majestic Before After Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before_label'

The WDesignKit – Elementor & Gutenberg Starter Templates, Patterns, Cloud Workspace & Widget Builder plugin for WordPres

The WP Photo Album Plus plugin for WordPress is vulnerable to Cross-Site Scripting in all versions up to, and including,

In fetchmail before 6.5.6, the SMTP client can crash when authenticating upon receiving a 334 status code in a malformed

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized modification of

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Information Exposure in all

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and incl

Mastra is a Typescript framework for building AI agents and assistants. Versions 0.13.8 through 0.13.20-alpha.0 are vuln

KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its fi

A vulnerability in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.4, 2024.Q4.0 throug

OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does no

Two unauthenticated diagnostic endpoints allow arbitrary backend-initiated network connections to an attacker‑supplied d

Claude Code is an agentic coding tool. Versions below 1.0.120 failed to account for symlinks when checking permission de

NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting (XSS) when develo

An improper authentication vulnerability has been reported to affect QNAP Authenticator. If an attacker gains physical a

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system ver

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains