2025

In the Linux kernel, the following vulnerability has been resolved: comedi: fix race between polling and detaching syz

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix vmalloc out-of-bounds write in fast_imag

In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2c_unregis

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix 1-byte out-of-bounds read in u

In the Linux kernel, the following vulnerability has been resolved: media: venus: Fix OOB read due to missing payload b

NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker wit

NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privile

NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause i

An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious

It was possible to perform Remote Command Execution (RCE) via Java RMI interface in the OpenEdge AdminServer, allowing a

Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applicat

A weakness has been identified in D-Link DI-8400 16.07.26A1. The affected element is the function yyxz_dlink_asp of the

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_415

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknow

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown f

A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0. This impacts an unknown

The Easy Timer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.1 v

The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on

The atec Debug plugin for WordPress is vulnerable to remote code execution in all versions up to, and including, 1.2.22

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE

The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validatio

Markdownify is a Model Context Protocol server for converting almost anything to Markdown. Versions below 0.0.2 contain

Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or over

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performan

In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer ove

In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer ov

In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This

In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation. This could lead to local e

WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.

There is a possible escalation of privilege due to test/debugging code left in a production build. This could lead to ph

There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pri

Information disclosure

In TBD of TBD, there is a possible DoS due to a missing null check. This could lead to remote denial of service with no

Denial of service

Elevation of privilege

In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrec

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication By

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypas

In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation. T

A security flaw has been discovered in projectworlds Travel Management System 1.0. The impacted element is an unknown fu

A vulnerability was identified in projectworlds Travel Management System 1.0. The affected element is an unknown functio

Netty is an asynchronous event-driven network application framework for development of maintainable high performance pro

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subjec

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2

A vulnerability was determined in projectworlds Travel Management System 1.0. Impacted is an unknown function of the fil

A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of t

Fuji Electric FRENIC-Loader 4 is vulnerable to a deserialization of untrusted data when importing a file through a speci

A vulnerability has been found in projectworlds Travel Management System 1.0. This vulnerability affects unknown code of

IBM Transformation Advisor 2.0.1 through 4.3.1 incorrectly assigns privileges to security critical files which could all

Figma Desktop for Windows version 125.6.5 contains a command injection vulnerability in the local plugin loader. An atta