MEDIUM Severity CVEs

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8173: Enable IRQ when pdata is re

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix memory leak when reading function t

In the Linux kernel, the following vulnerability has been resolved: ext4: don't set up encryption key during jbd2 trans

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid crash when inline data creation follows

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix possible memleak when register 'hctx' f

In the Linux kernel, the following vulnerability has been resolved: ALSA: aoa: i2sbus: fix possible memory leak in i2sb

In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: fix warning - do not call blocking ops

In the Linux kernel, the following vulnerability has been resolved: memory: of: Fix refcount leak bug in of_lpddr3_get_

In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one errors in fast-commit block fi

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97: fix possible memory leak in snd_ac97_de

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_dsp_rproc: Add mutex protection for

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Fix copy_xstate_to_uabi() to copy init sta

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: resource leaks at mt7921_check_

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/hpre - fix resource leak in remov

In the Linux kernel, the following vulnerability has been resolved: genetlink: fix genl_bind() invoking bind() after -E

In the Linux kernel, the following vulnerability has been resolved: can: j1939: implement NETDEV_UNREGISTER notificatio

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: bam_dma: Fix DT error handling for

In the Linux kernel, the following vulnerability has been resolved: spi: microchip-core-qspi: stop checking viability o

In the Linux kernel, the following vulnerability has been resolved: pcmcia: Add error handling for add_interval() in do

In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: avoid divide-by-zero in damon_rec

In the Linux kernel, the following vulnerability has been resolved: net: phy: transfer phy_config_inband() locking resp

In the Linux kernel, the following vulnerability has been resolved: tracing: Silence warning when chunk allocation fail

In the Linux kernel, the following vulnerability has been resolved: nfs/localio: restore creds before releasing pageio

In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc, mm/kasan: respect gfp mask in kasan_pop

In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: avoid divide-by-zero in damon_lr

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: stm32_fmc2: avoid overlapping mapping

In the Linux kernel, the following vulnerability has been resolved: arm64: kexec: initialize kexec_buf struct in load_o

In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing ker

In the Linux kernel, the following vulnerability has been resolved: net_sched: gen_estimator: fix est_timer() vs CONFIG

In the Linux kernel, the following vulnerability has been resolved: mm/userfaultfd: fix kmap_local LIFO ordering for CO

In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offlin

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: unregister ECC engine on probe

In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: care NULL dirver name on snd_soc_lo

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modi

The ZoloBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple Gutenberg blocks in versio

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposu

The Block For Mailchimp – Easy Mailchimp Form Integration plugin for WordPress is vulnerable to Blind Server-Side Reques

Quadient DS-700 iQ devices through 2025-09-30 might have a race condition during the quick clicking of (in order) the Qu

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1,

Stored cross-site scripting (XSS) vulnerabilities in Web Content translation in Liferay Portal 7.4.0 through 7.4.3.112,

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 could allow a malicious privileged user to

IBM Planning Analytics Local 2.0.0 through 2.0.106 and 2.1.0 through 2.1.13 is vulnerable to cross-site scripting. This

Insecure Direct Object Reference (IDOR) vulnerability with audit events in Liferay Portal 7.4.0 through 7.4.3.117, and o

An SQL injection vulnerability in user-login.php and index.php of Karthikg1908 Hospital Management System (HMS) 1.0 allo

A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' a

NVIDIA Delegated Licensing Service for all appliance platforms contains a SQL injection vulnerability where an User/Atta

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_

A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Et

TitanSystems Zender v3.9.7 contains an account takeover vulnerability in its password reset functionality. A temporary p

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category