2025

In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndo_change_mtu() to prevent b

In the Linux kernel, the following vulnerability has been resolved: can: sun4i_can: populate ndo_change_mtu() to preven

In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: populate ndo_change_mtu() to prevent

In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The s

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeu

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_con

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to

In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_

In the Linux kernel, the following vulnerability has been resolved: futex: Prevent use-after-free during requeue-PI sy

In the Linux kernel, the following vulnerability has been resolved: futex: Use correct exit on failure from futex_hash_

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix wrong index reference in smb2_comp

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix slab-out-of-bounds in _parse_i

In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map

In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensu

In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta F

In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources

In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There

In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font F

In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix race during abort for file descriptors

The Dynamically Display Posts plugin for WordPress is vulnerable to SQL Injection via the 'tax_query' parameter in all v

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the vc_custom_heading sh

The WPBakery Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS module in

The Ova Advent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all vers

The Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme plugin for WordPress is vulnerable

In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allow

A vulnerability exists in certain Dahua embedded products. Third-party malicious attacker with obtained normal user cred

RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled search path element vul

RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled search path element vul

RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. If

The Quick Featured Images plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,

The BlindMatrix e-Commerce WordPress plugin before 3.1 does not validate some shortcode attributes before using them to

In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check of

The XStore theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.5.4 via the

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to

Bridge versions 14.1.8, 15.1.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result

Huijietong Cloud Video Platform contains a path traversal vulnerability that allows an unauthenticated attacker can supp

BYTEVALUE Intelligent Flow Control Router contains a command injection vulnerability via the /goform/webRead/open endpoi

SmartBI V8, V9, and V10 contain an unrestricted file upload vulnerability via the RMIServlet request handling logic. Und

Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmc_sync.php' interface

VestaCP commit a3f0fa1 (2018-05-31) up to commit ee03eff (2018-06-13) contain embedded malicious code that resulted in a

Valve's Source SDK (source-sdk-2013)'s ragdoll model parsing logic contains a stack-based buffer overflow vulnerability.

DBLTek GoIP devices (models GoIP 1, 4, 8, 16, and 32) contain an undocumented vendor backdoor in the Telnet administrati

The WordPress plugin is-human <= v1.4.2 contains an eval injection vulnerability in /is-human/engine.php that can be tri

Animate versions 23.0.13, 24.0.10 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could resu

Animate versions 23.0.13, 24.0.10 and earlier are affected by a Use After Free vulnerability that could result in arbitr

Animate versions 23.0.13, 24.0.10 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead t

Animate versions 23.0.13, 24.0.10 and earlier are affected by an out-of-bounds read vulnerability that could lead to mem