CVEs published June 18, 2025
413 CVEs were published on June 18, 2025: 11 critical, 100 high.
- Published
- 413
- Critical
- 11
- High
- 100
- Medium
- 19
- Low
- 2
- Unrated
- 281
- Now in CISA KEV
- 0
- Fix available
- 87
Most affected products
- Linux
- 362
- Versa Director
- 9
- IBM Sterling B2B Integrator
- 4
- Cloudflare quiche
- 2
- cryptpad
- 2
- Google Chrome
- 2
- IBM webMethods Integration Server
- 2
- Veeam Backup and Recovery
- 2
- amans2k FunnelKit Automations – Email Marketing Automation…
- 1
- byrev Pixabay Images
- 1
Critical 11
- CVE-2025-24288The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multVersa Director
- CVE-2024-45208The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service.Versa Director
- CVE-2025-23121A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain userVeeam Backup and Recovery
- CVE-2025-20260ClamAV PDF Scanning Buffer Overflow VulnerabilityCisco ClamAV
- CVE-2025-38075scsi: target: iscsi: Fix timeout on deleted connectionLinux
- CVE-2025-1562Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit <= 3.5.3 - Missing Authorization to Unauthenticated Arbitrary Plugin Installationamans2k FunnelKit Automations – Email Marketing Automation…
- CVE-2025-51381An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier.KAON KCM3100
- CVE-2025-26198CloudClassroom-PHP-Project v1.0 contains a critical SQL Injection vulnerability in the loginlinkadmin.php component.
- CVE-2025-26199CloudClassroom-PHP-Project v1.0 is affected by an insecure credential transmission vulnerability.
- CVE-2025-45784D-Link DPH-400S/SE VoIP Phone v1.01 contains hardcoded provisioning variables, including PROVIS_USER_PASSWORD, which may expose sensitive us
- CVE-2025-46157An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave reques
High 100
- CVE-2025-23171The Versa Director SD-WAN orchestration platform provides an option to upload various types of files.Versa Director
- CVE-2025-24286A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.Veeam Backup and Recovery
- CVE-2025-23172The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints.Versa Director
- CVE-2025-23173The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI.Versa Director
- CVE-2025-49591CryptPad 2FA Bypass Vulnerabilitycryptpad
- CVE-2025-6192Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2025-6191Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory accessGoogle Chrome
- CVE-2025-20271Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service VulnerabilityCisco Meraki MX Firmware
- CVE-2025-36049IBM webMethods Integration Sever XML external entity injectionIBM webMethods Integration Server
- CVE-2025-36048IBM webMethods Integration Sever code executionIBM webMethods Integration Server
- CVE-2025-4821Incorrect congestion window growth by invalid ACK rangesCloudflare quiche
- CVE-2025-6220Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'themefic Ultra Addons for Contact Form
- CVE-2022-50231crypto: arm64/poly1305 - fix a read out-of-boundLinux
- CVE-2022-50227KVM: x86/xen: Initialize Xen timer only onceLinux
- CVE-2022-50221drm/fb-helper: Fix out-of-bounds accessLinux
- CVE-2022-50219bpf: Fix KASAN use-after-free Read in compute_effective_progsLinux
- CVE-2022-50215scsi: sg: Allow waiting for commands to complete on removed deviceLinux
- CVE-2022-50213netfilter: nf_tables: do not allow SET_ID to refer to another tableLinux
- CVE-2022-50212netfilter: nf_tables: do not allow CHAIN_ID to refer to another tableLinux
- CVE-2022-50200selinux: Add boundary check in put_entry()Linux
- CVE-2022-50182media: imx-jpeg: Align upwards buffer sizeLinux
- CVE-2022-50171crypto: hisilicon/sec - don't sleep when in softirqLinux
- CVE-2022-50168bpf, x86: fix freeing of not-finalized bpf_prog_packLinux
- CVE-2022-50167bpf: fix potential 32-bit overflow when accessing ARRAY map elementLinux
- CVE-2022-50164wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queueLinux
- CVE-2022-50156HID: cp2112: prevent a buffer overflow in cp2112_xfer()Linux
- CVE-2022-50145dmaengine: sf-pdma: Add multithread support for a DMA channelLinux
- CVE-2022-50137RDMA/irdma: Fix a window for use-after-freeLinux
- CVE-2022-50136RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY eventLinux
- CVE-2022-50131HID: mcp2221: prevent a buffer overflow in mcp_smbus_write()Linux
- CVE-2022-50129RDMA/srpt: Fix a use-after-freeLinux
- CVE-2022-50101video: fbdev: vt8623fb: Check the size of screen before memset_io()Linux
- CVE-2022-50099video: fbdev: arkfb: Check the size of screen before memset_io()Linux
- CVE-2022-50098scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeoutsLinux
- CVE-2022-50097video: fbdev: s3fb: Check the size of screen before memset_io()Linux
- CVE-2022-50095posix-cpu-timers: Cleanup CPU timers before freeing them during execLinux
- CVE-2022-50087firmware: arm_scpi: Ensure scpi_info is not assigned if the probe failsLinux
- CVE-2022-50079drm/amd/display: Check correct bounds for stream encoder instances for DCN303Linux
- CVE-2022-50072NFSv4/pnfs: Fix a use-after-free bug in openLinux
- CVE-2022-50070mptcp: do not queue data on closed subflowsLinux
- CVE-2022-50064virtio-blk: Avoid use-after-free on suspend/resumeLinux
- CVE-2022-50062net: bgmac: Fix a BUG triggered by wrong bytes_complLinux
- CVE-2022-50059ceph: don't leak snap_rwsem in handle_cap_grantLinux
- CVE-2022-50048netfilter: nf_tables: possible module reference underflow in error pathLinux
- CVE-2022-50035drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutexLinux
- CVE-2022-50028gadgetfs: ep_io - wait until IRQ finishesLinux
- CVE-2022-50022drivers:md:fix a potential use-after-free bugLinux
- CVE-2022-50014mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COWLinux
- CVE-2022-50000netfilter: flowtable: fix stuck flows on cleanup due to pending workLinux
- CVE-2022-49999btrfs: fix space cache corruption and potential double allocationsLinux
- CVE-2022-49998rxrpc: Fix locking in rxrpc's sendmsgLinux
- CVE-2022-49997net: lantiq_xrx200: restore buffer if memory allocation failedLinux
- CVE-2022-49995writeback: avoid use-after-free after removing deviceLinux
- CVE-2022-49991mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pteLinux
- CVE-2022-49990s390: fix double free of GS and RI CBs on fork() failureLinux
- CVE-2022-49985bpf: Don't use tnum_range on array range checking for poke descriptorsLinux
- CVE-2022-49979net: fix refcount bug in sk_psock_get (2)Linux
- CVE-2022-49977ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is deadLinux
- CVE-2022-49974HID: nintendo: fix rumble worker null pointer derefLinux
- CVE-2022-49972xsk: Fix corrupted packets for XDP_SHARED_UMEMLinux
- CVE-2022-49968ieee802154/adf7242: defer destroy_workqueue callLinux
- CVE-2022-49963drm/i915/ttm: fix CCS handlingLinux
- CVE-2022-49956staging: rtl8712: fix use after free bugsLinux
- CVE-2022-49952misc: fastrpc: fix memory corruption on probeLinux
- CVE-2022-49950misc: fastrpc: fix memory corruption on openLinux
- CVE-2022-49948vt: Clear selection before changing the fontLinux
- CVE-2022-49944Revert "usb: typec: ucsi: add a common function ucsi_unregister_connectors()"Linux
- CVE-2022-49939binder: fix UAF of ref->proc caused by race conditionLinux
- CVE-2022-49935dma-buf/dma-resv: check if the new fence is really laterLinux
- CVE-2022-49934wifi: mac80211: Fix UAF in ieee80211_scan_rx()Linux
- CVE-2025-38082gpio: virtuser: fix potential out-of-bound writeLinux
- CVE-2025-38080drm/amd/display: Increase block_sequence array sizeLinux
- CVE-2025-38079crypto: algif_hash - fix double free in hash_acceptLinux
- CVE-2025-38078ALSA: pcm: Fix race of buffer access at PCM OSS layerLinux
- CVE-2025-38074vhost-scsi: protect vq->log_used with vq->mutexLinux
- CVE-2025-38068crypto: lzo - Fix compression buffer overrunLinux
- CVE-2025-38065orangefs: Do not truncate file sizeLinux
- CVE-2025-38064virtio: break and reset virtio devices on device_shutdown()Linux
- CVE-2025-38062genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookieLinux
- CVE-2025-38060bpf: copy_verifier_state() should copy 'loop_entry' fieldLinux
- CVE-2025-38058__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lockLinux
- CVE-2025-38057espintcp: fix skb leaksLinux
- CVE-2025-38052net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_doneLinux
- CVE-2025-38051smb: client: Fix use-after-free in cifs_fill_direntLinux
- CVE-2025-38035nvmet-tcp: don't restore null sk_state_changeLinux
- CVE-2025-38028NFS/localio: Fix a race in nfs_local_open_fh()Linux
- CVE-2025-38024RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bugLinux
- CVE-2025-38022RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problemLinux
- CVE-2025-38018net/tls: fix kernel panic when alloc_page failedLinux
- CVE-2025-38016HID: bpf: abort dispatch if device destroyedLinux
- CVE-2025-38012sched_ext: bpf_iter_scx_dsq_new() should always initialize iteratorLinux
- CVE-2025-38005dmaengine: ti: k3-udma: Add missing lockingLinux
- CVE-2025-6086CSV Me <= 2.0 - Authenticated (Administrator+) Arbitrary File Uploadscottyla CSV Me
- CVE-2025-50202Lychee Path Traversal VulnerabilityLycheeOrg Lychee
- CVE-2025-4413Pixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File Uploadbyrev Pixabay Images
- CVE-2025-29646An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRe
- CVE-2025-44951A missing length check in `ogs_pfcp_dev_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a loc
- CVE-2025-44952A missing length check in `ogs_pfcp_subnet_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a
- CVE-2025-45786Real Estate Management 1.0 is vulnerable to Cross Site Scripting (XSS) in /store/index.php.
- CVE-2025-46109SQL Injection vulnerability in pbootCMS v.3.2.5 and v.3.2.10 allows a remote attacker to obtain sensitive information via a crafted GET requ
Medium, low and unrated 302
- CVE-2025-24291The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files.Versa Director
- CVE-2025-23168The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via emaVersa Director
- CVE-2025-23169The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo.Versa Director
- CVE-2025-23170The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via SVersa Director
- CVE-2025-24287A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with eleVeeam Backup for Microsoft Windows
- CVE-2025-49590CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerabilitycryptpad
- CVE-2025-1349IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scriptingIBM Sterling B2B Integrator
- CVE-2025-20234ClamAV UDF File Parsing Out-Of-Bounds Read Information Disclosure VulnerabilityCisco Secure Endpoint
- CVE-2025-1348IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureIBM Sterling B2B Integrator
- CVE-2024-54172IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgeryIBM Sterling B2B Integrator
- CVE-2025-4820Incorrect congestion window growth by optimistic ACKCloudflare quiche
- CVE-2024-54183IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scriptingIBM Sterling B2B Integrator
- CVE-2025-6240Profisee Path Traversal VulnerabilityProfisee
- CVE-2022-50232arm64: set UXN on swapper page tablesLinux
- CVE-2022-50230arm64: set UXN on swapper page tablesLinux
- CVE-2022-50229ALSA: bcd2000: Fix a UAF bug on the error path of probingLinux
- CVE-2022-50228KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0Linux
- CVE-2022-50226crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leakLinux
- CVE-2022-50225riscv:uprobe fix SR_SPIE set/clear handlingLinux
- CVE-2022-50224KVM: x86/mmu: Treat NX as a valid SPTE bit for NPTLinux
- CVE-2022-50223LoongArch: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACKLinux
- CVE-2022-50222tty: vt: initialize unicode screen bufferLinux
- CVE-2022-50220usbnet: Fix linkwatch use-after-free on disconnectLinux
- CVE-2022-50218iio: light: isl29028: Fix the warning in isl29028_remove()Linux
- CVE-2022-50217fuse: write inode in fuse_release()Linux
- CVE-2022-50214coresight: Clear the connection field properlyLinux
- CVE-2022-50211md-raid10: fix KASAN warningLinux
- CVE-2022-50210MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACKLinux
- CVE-2022-50209meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_initLinux
- CVE-2022-50208soc: amlogic: Fix refcount leak in meson-secure-pwrc.cLinux
- CVE-2022-50207ARM: bcm: Fix refcount leak in bcm_kona_smc_initLinux
- CVE-2022-50206arm64: fix oops in concurrently setting insn_emulation sysctlsLinux
- CVE-2022-50205ext2: Add more validity checks for inode countsLinux
- CVE-2022-50204ARM: OMAP2+: pdata-quirks: Fix refcount leak bugLinux
- CVE-2022-50203ARM: OMAP2+: display: Fix refcount leak bugLinux
- CVE-2022-50202PM: hibernate: defer device probing when resuming from hibernationLinux
- CVE-2022-50201selinux: fix memleak in security_read_state_kernel()Linux
- CVE-2022-50199ARM: OMAP2+: Fix refcount leak in omapdss_init_ofLinux
- CVE-2022-50198ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_initLinux
- CVE-2022-50197cpufreq: zynq: Fix refcount leak in zynq_get_revisionLinux
- CVE-2022-50196soc: qcom: ocmem: Fix refcount leak in of_get_ocmemLinux
- CVE-2022-50195ARM: dts: qcom: replace gcc PXO with pxo_board fixed clockLinux
- CVE-2022-50194soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_registerLinux
- CVE-2022-50193erofs: wake up all waiters after z_erofs_lzma_head readyLinux
- CVE-2022-50192spi: tegra20-slink: fix UAF in tegra_slink_remove()Linux
- CVE-2022-50191regulator: of: Fix refcount leak bug in of_get_regulation_constraints()Linux
- CVE-2022-50190spi: Fix simplification of devm_spi_register_controllerLinux
- CVE-2022-50189tools/power turbostat: Fix file pointer leakLinux
- CVE-2022-50188drm/meson: Fix refcount leak in meson_encoder_hdmi_initLinux
- CVE-2022-50187ath11k: fix netdev open raceLinux
- CVE-2022-50186ath11k: fix missing skb drop on htc_tx_completion errorLinux
- CVE-2022-50185drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()Linux
- CVE-2022-50184drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_initLinux
- CVE-2022-50183drm/meson: encoder_cvbs: Fix refcount leak in meson_encoder_cvbs_initLinux
- CVE-2022-50181virtio-gpu: fix a missing check to avoid NULL dereferenceLinux
- CVE-2022-50179ath9k: fix use-after-free in ath9k_hif_usb_rx_cbLinux
- CVE-2022-50178wifi: rtw89: 8852a: rfk: fix div 0 exceptionLinux
- CVE-2022-50177rcutorture: Fix ksoftirqd boosting timing and iterationLinux
- CVE-2022-50176drm/mcde: Fix refcount leak in mcde_dsi_bindLinux
- CVE-2022-50175media: tw686x: Fix memory leak in tw686x_video_initLinux
- CVE-2022-50174net: hinic: avoid kernel hung in hinic_get_stats64()Linux
- CVE-2022-50173drm/msm/mdp5: Fix global state lock backoffLinux
- CVE-2022-50172mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msgLinux
- CVE-2022-50170kunit: executor: Fix a memory leak on failure in kunit_filter_testsLinux
- CVE-2022-50169wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()Linux
- CVE-2022-50166Bluetooth: When HCI work queue is drained, only queue chained workLinux
- CVE-2022-50165wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`Linux
- CVE-2022-50163ax25: fix incorrect dev_tracker usageLinux
- CVE-2022-50162wifi: libertas: Fix possible refcount leak in if_usb_probe()Linux
- CVE-2022-50161mtd: maps: Fix refcount leak in of_flash_probe_versatileLinux
- CVE-2022-50160mtd: maps: Fix refcount leak in ap_flash_initLinux
- CVE-2022-50159of: check previous kernel's ima-kexec-buffer against memory boundsLinux
- CVE-2022-50158mtd: partitions: Fix refcount leak in parse_redboot_ofLinux
- CVE-2022-50157PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains()Linux
- CVE-2022-50155mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offsetLinux
- CVE-2022-50154PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains()Linux
- CVE-2022-50153usb: host: Fix refcount leak in ehci_hcd_ppc_of_probeLinux
- CVE-2022-50152usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probeLinux
- CVE-2022-50151usb: cdns3: fix random warning message when driver loadLinux
- CVE-2022-50149driver core: fix potential deadlock in __driver_attachLinux
- CVE-2022-50148kernfs: fix potential NULL dereference in __kernfs_removeLinux
- CVE-2022-50147mm/mempolicy: fix get_nodes out of bound accessLinux
- CVE-2022-50146PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errorsLinux
- CVE-2022-50144soundwire: revisit driver bind/unbind and callbacksLinux
- CVE-2022-50143intel_th: Fix a resource leak in an error handling pathLinux
- CVE-2022-50142intel_th: msu: Fix vmalloced buffersLinux
- CVE-2022-50141mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switchLinux
- CVE-2022-50140memstick/ms_block: Fix a memory leakLinux
- CVE-2022-50139usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc()Linux
- CVE-2022-50138RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr()Linux
- CVE-2022-50135RDMA/rxe: Fix BUG: KASAN: null-ptr-deref in rxe_qp_do_cleanupLinux
- CVE-2022-50134RDMA/hfi1: fix potential memory leak in setup_base_ctxt()Linux
- CVE-2022-50133usb: xhci_plat_remove: avoid NULL dereferenceLinux
- CVE-2022-50132usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable()Linux
- CVE-2022-50130staging: fbtft: core: set smem_len before fb_deferred_io_init callLinux
- CVE-2022-50127RDMA/rxe: Fix error unwind in rxe_create_qp()Linux
- CVE-2022-50126jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal abortedLinux
- CVE-2022-50125ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probeLinux
- CVE-2022-50124ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probeLinux
- CVE-2022-50123ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probeLinux
- CVE-2022-50122ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probeLinux
- CVE-2022-50121remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_initLinux
- CVE-2022-50120remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_initLinux
- CVE-2022-50119rpmsg: Fix possible refcount leak in rpmsg_register_device_override()Linux
- CVE-2022-50118powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disableLinux
- CVE-2022-50117vfio: Split migration ops from main device opsLinux
- CVE-2022-50116tty: n_gsm: fix deadlock and link starvation in outgoing data pathLinux
- CVE-2022-50115ASoC: SOF: ipc3-topology: Prevent double freeing of ipc_control_data via load_bytesLinux
- CVE-2022-50114net: 9p: fix refcount leak in p9_read_work() error handlingLinux
- CVE-2022-50113ASoc: audio-graph-card2: Fix refcount leak bug in __graph_get_type()Linux
- CVE-2022-50112rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edgeLinux
- CVE-2022-50111ASoC: mt6359: Fix refcount leak bugLinux
- CVE-2022-50110watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resourceLinux
- CVE-2022-50109video: fbdev: amba-clcd: Fix refcount leak bugsLinux
- CVE-2022-50108mfd: max77620: Fix refcount leak in max77620_initialise_fpsLinux
- CVE-2022-50107cifs: Fix memory leak when using fscacheLinux
- CVE-2022-50106powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_addressLinux
- CVE-2022-50105powerpc/spufs: Fix refcount leak in spufs_init_isolated_loaderLinux
- CVE-2022-50104powerpc/xive: Fix refcount leak in xive_get_max_prioLinux
- CVE-2022-50103sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowedLinux
- CVE-2022-50102video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()Linux
- CVE-2022-50100sched/core: Do not requeue task on CPU excluded from cpus_maskLinux
- CVE-2022-50096x86/kprobes: Update kcb status flag after singlesteppingLinux
- CVE-2022-50094spmi: trace: fix stack-out-of-bound access in SPMI tracing functionsLinux
- CVE-2022-50093iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)Linux
- CVE-2022-50092dm thin: fix use-after-free crash in dm_sm_register_threshold_callbackLinux
- CVE-2022-50091locking/csd_lock: Change csdlock_debug from early_param to __setupLinux
- CVE-2022-50090btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_sizeLinux
- CVE-2022-50089btrfs: ensure pages are unlocked on cow_file_range() failureLinux
- CVE-2022-50088mm/damon/reclaim: fix potential memory leak in damon_reclaim_init()Linux
- CVE-2022-50086block: don't allow the same type rq_qos add more than onceLinux
- CVE-2022-50085dm raid: fix address sanitizer warning in raid_resumeLinux
- CVE-2022-50084dm raid: fix address sanitizer warning in raid_statusLinux
- CVE-2022-50082ext4: fix warning in ext4_iomap_begin as race between bmap and writeLinux
- CVE-2022-50080tee: add overflow check in register_shm_helper()Linux
- CVE-2022-50078tracing/eprobes: Do not allow eprobes to use $stack, or % for regsLinux
- CVE-2022-50077apparmor: fix reference count leak in aa_pivotroot()Linux
- CVE-2022-50076cifs: Fix memory leak on the deferred closeLinux
- CVE-2022-50075tracing/eprobes: Have event probes be consistent with kprobes and uprobesLinux
- CVE-2022-50074apparmor: Fix memleak in aa_simple_write_to_buffer()Linux
- CVE-2022-50073net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is nullLinux
- CVE-2022-50071mptcp: move subflow cleanup in mptcp_destroy_common()Linux
- CVE-2022-50069BPF: Fix potential bad pointer dereference in bpf_sys_bpf()Linux
- CVE-2022-50068drm/ttm: Fix dummy res NULL ptr deref bugLinux
- CVE-2022-50067btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()Linux
- CVE-2022-50066net: atlantic: fix aq_vec index out of range errorLinux
- CVE-2022-50065virtio_net: fix memory leak inside XPD_TX with mergeableLinux
- CVE-2022-50063net: dsa: felix: suppress non-changes to the tagging protocolLinux
- CVE-2022-50061pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_mapLinux
- CVE-2022-50060octeontx2-af: Fix mcam entry resource leakLinux
- CVE-2022-50058vdpa_sim_blk: set number of address spaces and virtqueue groupsLinux
- CVE-2022-50057fs/ntfs3: Fix NULL deref in ntfs_update_mftmirrLinux
- CVE-2022-50056fs/ntfs3: Fix missing i_op in ntfs_read_mftLinux
- CVE-2022-50055iavf: Fix adminq error handlingLinux
- CVE-2022-50054iavf: Fix NULL pointer dereference in iavf_get_link_ksettingsLinux
- CVE-2022-50053iavf: Fix reset error handlingLinux
- CVE-2022-50052ASoC: Intel: avs: Fix potential buffer overflow by snprintf()Linux
- CVE-2022-50051ASoC: SOF: debug: Fix potential buffer overflow by snprintf()Linux
- CVE-2022-50050ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()Linux
- CVE-2022-50049ASoC: DPCM: Don't pick up BE without substreamLinux
- CVE-2022-50047net: dsa: mv88e6060: prevent crash on an unused portLinux
- CVE-2022-50046net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()Linux
- CVE-2022-50045powerpc/pci: Fix get_phb_number() lockingLinux
- CVE-2022-50044net: qrtr: start MHI channel after endpoit creationLinux
- CVE-2022-50043net: fix potential refcount leak in ndisc_router_discovery()Linux
- CVE-2022-50042net: genl: fix error path memory leak in policy dumpingLinux
- CVE-2022-50041ice: Fix call trace with null VSI during VF resetLinux
- CVE-2022-50040net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()Linux
- CVE-2022-50039stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()Linux
- CVE-2022-50038drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()Linux
- CVE-2022-50037drm/i915/ttm: don't leak the ccs stateLinux
- CVE-2022-50036drm/sun4i: dsi: Prevent underflow when computing packet sizesLinux
- CVE-2022-50034usb: cdns3 fix use-after-free at workaround 2Linux
- CVE-2022-50033usb: host: ohci-ppc-of: Fix refcount leak bugLinux
- CVE-2022-50032usb: renesas: Fix refcount leak bugLinux
- CVE-2022-50030scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user inputLinux
- CVE-2022-50029clk: qcom: ipq8074: dont disable gcc_sleep_clk_srcLinux
- CVE-2022-50027scsi: lpfc: Fix possible memory leak when failing to issue CMF WQELinux
- CVE-2022-50026habanalabs/gaudi: fix shift out of boundsLinux
- CVE-2022-50025cxl: Fix a memory leak in an error handling pathLinux
- CVE-2022-50024dmaengine: dw-axi-dmac: do not print NULL LLI during errorLinux
- CVE-2022-50023dmaengine: dw-axi-dmac: ignore interrupt if no descriptorLinux
- CVE-2022-50021ext4: block range must be validated before use in ext4_mb_clear_bb()Linux
- CVE-2022-50020ext4: avoid resizing to a partial cluster sizeLinux
- CVE-2022-50019tty: serial: Fix refcount leak bug in ucc_uart.cLinux
- CVE-2022-50017mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_startLinux
- CVE-2022-50016ASoC: SOF: Intel: cnl: Do not process IPC reply before firmware bootLinux
- CVE-2022-50015ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware bootLinux
- CVE-2022-50013f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()Linux
- CVE-2022-50012powerpc/64: Init jump labels before parse_early_param()Linux
- CVE-2022-50011venus: pm_helpers: Fix warning in OPP during probeLinux
- CVE-2022-50010video: fbdev: i740fb: Check the argument of i740_calc_vclk()Linux
- CVE-2022-50009f2fs: fix null-ptr-deref in f2fs_get_dnode_of_dataLinux
- CVE-2022-50008kprobes: don't call disarm_kprobe() for disabled kprobesLinux
- CVE-2022-50007xfrm: fix refcount leak in __xfrm_policy_check()Linux
- CVE-2022-50006NFSv4.2 fix problems with __nfs42_ssc_openLinux
- CVE-2022-50005nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeoutLinux
- CVE-2022-50004xfrm: policy: fix metadata dst->dev xmit null pointer dereferenceLinux
- CVE-2022-50003ice: xsk: prohibit usage of non-balanced queue idLinux
- CVE-2022-50002net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READYLinux
- CVE-2022-50001netfilter: nft_tproxy: restrict to prerouting hookLinux
- CVE-2022-49996btrfs: fix possible memory leak in btrfs_get_dev_args_from_path()Linux
- CVE-2022-49994bootmem: remove the vmemmap pages from kmemleak in put_page_bootmemLinux
- CVE-2022-49993loop: Check for overflow while configuring loopLinux
- CVE-2022-49992mm/mprotect: only reference swap pfn page if type matchLinux
- CVE-2022-49989xen/privcmd: fix error exit of privcmd_ioctl_dm_op()Linux
- CVE-2022-49987md: call __md_stop_writes in md_stopLinux
- CVE-2022-49986scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wqLinux
- CVE-2022-49984HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_reportLinux
- CVE-2022-49983udmabuf: Set the DMA mask for the udmabuf device (v2)Linux
- CVE-2022-49982media: pvrusb2: fix memory leak in pvr_probeLinux
- CVE-2022-49981HID: hidraw: fix memory leak in hidraw_release()Linux
- CVE-2022-49980USB: gadget: Fix use-after-free Read in usb_udc_uevent()Linux
- CVE-2022-49978fbdev: fb_pm2fb: Avoid potential divide by zero errorLinux
- CVE-2022-49976platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOSLinux
- CVE-2022-49975bpf: Don't redirect packets with invalid pkt_lenLinux
- CVE-2022-49973skmsg: Fix wrong last sg check in sk_msg_recvmsg()Linux
- CVE-2022-49971drm/amd/pm: Fix a potential gpu_metrics_table memory leakLinux
- CVE-2022-49970bpf, cgroup: Fix kernel BUG in purge_effective_progsLinux
- CVE-2022-49969drm/amd/display: clear optc underflow before turn off odm clockLinux
- CVE-2022-49967bpf: Fix a data-race around bpf_jit_limit.Linux
- CVE-2022-49966drm/amd/pm: add missing ->fini_microcode interface for Sienna CichlidLinux
- CVE-2022-49965drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asicsLinux
- CVE-2022-49964arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_levelLinux
- CVE-2022-49962xhci: Fix null pointer dereference in remove if xHC has only one roothubLinux
- CVE-2022-49961bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZEROLinux
- CVE-2022-49960drm/i915: fix null pointer dereferenceLinux
- CVE-2022-49959openvswitch: fix memory leak at failed datapath creationLinux
- CVE-2022-49958net/sched: fix netdevice reference leaks in attach_default_qdiscs()Linux
- CVE-2022-49957kcm: fix strp_init() order and cleanupLinux
- CVE-2022-49955powerpc/rtas: Fix RTAS MSR[HV] handling for CellLinux
- CVE-2022-49954Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flagLinux
- CVE-2022-49953iio: light: cm3605: Fix an error handling path in cm3605_probe()Linux
- CVE-2022-49951firmware_loader: Fix use-after-free during unregisterLinux
- CVE-2022-49949firmware_loader: Fix memory leak in firmware uploadLinux
- CVE-2022-49947binder: fix alloc->vma_vm_mm null-ptr dereferenceLinux
- CVE-2022-49946clk: bcm: rpi: Prevent out-of-bounds accessLinux
- CVE-2022-49945hwmon: (gpio-fan) Fix array out of bounds accessLinux
- CVE-2022-49943USB: gadget: Fix obscure lockdep violation for udc_mutexLinux
- CVE-2022-49942wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnectedLinux
- CVE-2022-49940tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()Linux
- CVE-2022-49938cifs: fix small mempool leak in SMB2_negotiate()Linux
- CVE-2022-49937media: mceusb: Use new usb_control_msg_*() routinesLinux
- CVE-2022-49936USB: core: Prevent nested device-reset callsLinux
- CVE-2025-1088Very long unicode dashboard title or panel name can hang the frontendGrafana · github.com/grafana/grafana
- CVE-2025-38081spi-rockchip: Fix register out of bounds accessLinux
- CVE-2025-38077platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()Linux
- CVE-2025-38076alloc_tag: allocate percpu counters for module tags dynamicallyLinux
- CVE-2025-38072libnvdimm/labels: Fix divide error in nd_label_data_init()Linux
- CVE-2025-38071x86/mm: Check return value from memblock_phys_alloc_range()Linux
- CVE-2025-38070ASoC: sma1307: Add NULL check in sma1307_setting_loaded()Linux
- CVE-2025-38069PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oopsLinux
- CVE-2025-38067rseq: Fix segfault on registration when rseq_cs is non-zeroLinux
- CVE-2025-38066dm cache: prevent BUG_ON by blocking retries on failed device resumesLinux
- CVE-2025-38063dm: fix unconditional IO throttle caused by REQ_PREFLUSHLinux
- CVE-2025-38061net: pktgen: fix access outside of user given buffer in pktgen_thread_write()Linux
- CVE-2025-38059btrfs: avoid NULL pointer dereference if no valid csum treeLinux
- CVE-2025-38056ASoC: SOF: Intel: hda: Fix UAF when reloading moduleLinux
- CVE-2025-38055perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freqLinux
- CVE-2025-38054ptp: ocp: Limit signal/freq counts in summary output functionsLinux
- CVE-2025-38053idpf: fix null-ptr-deref in idpf_features_checkLinux
- CVE-2025-38050mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb foliosLinux
- CVE-2025-38048virtio_ring: Fix data race by tagging event_triggered as racy for KCSANLinux
- CVE-2025-38047x86/fred: Fix system hang during S4 resume with FRED enabledLinux
- CVE-2025-38045wifi: iwlwifi: fix debug actions orderLinux
- CVE-2025-38044media: cx231xx: set device_caps for 417Linux
- CVE-2025-38043firmware: arm_ffa: Set dma_mask for ffa devicesLinux
- CVE-2025-38042dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chnLinux
- CVE-2025-38041clk: sunxi-ng: h616: Reparent GPU clock during frequency changesLinux
- CVE-2025-38040serial: mctrl_gpio: split disable_ms into sync and no_sync APIsLinux
- CVE-2025-38039net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabledLinux
- CVE-2025-38038cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boostLinux
- CVE-2025-38037vxlan: Annotate FDB data racesLinux
- CVE-2025-38036drm/xe/vf: Perform early GT MMIO initialization to read GMDIDLinux
- CVE-2025-38034btrfs: correct the order of prelim_ref arguments in btrfs__prelim_refLinux
- CVE-2025-38033x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88Linux
- CVE-2025-38032mr: consolidate the ipmr_can_free_table() checks.Linux
- CVE-2025-38031padata: do not leak refcount in reorder_workLinux
- CVE-2025-38029kasan: avoid sleepable page allocation from atomic contextLinux
- CVE-2025-38027regulator: max20086: fix invalid memory accessLinux
- CVE-2025-38025iio: adc: ad7606: check for NULL before calling sw_mode_config()Linux
- CVE-2025-38023nfs: handle failure of nfs_get_lock_context in unlock pathLinux
- CVE-2025-38021drm/amd/display: Fix null check of pipe_ctx->plane_state for update_dchubp_dppLinux
- CVE-2025-38020net/mlx5e: Disable MACsec offload for uplink representor profileLinux
- CVE-2025-38019mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devicesLinux
- CVE-2025-38017fs/eventpoll: fix endless busy loop after timeout has expiredLinux
- CVE-2025-38015dmaengine: idxd: fix memory leak in error handling path of idxd_allocLinux
- CVE-2025-38014dmaengine: idxd: Refactor remove call with idxd_cleanup() helperLinux
- CVE-2025-38013wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_requestLinux
- CVE-2025-38011drm/amdgpu: csa unmap use uninterruptible lockLinux
- CVE-2025-38010phy: tegra: xusb: Use a bitmask for UTMI pad power state trackingLinux
- CVE-2025-38009wifi: mt76: disable napi on driver removalLinux
- CVE-2025-38008mm/page_alloc: fix race condition in unaccepted memory handlingLinux
- CVE-2025-38007HID: uclogic: Add NULL check in uclogic_input_configured()Linux
- CVE-2025-38006net: mctp: Don't access ifa_index when missingLinux
- CVE-2025-23999WordPress Breeze plugin <= 2.2.13 - Broken Access Control vulnerabilityCloudways Breeze
- CVE-2025-5237Target Video Easy Publish <= 3.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameternebojsadabic Target Video Easy Publish
- CVE-2025-5981Arbitrary File write in OSV-SCALIBRGoogle osv-scalibr · github.com/google/osv-scalibr
- CVE-2025-4955tarteaucitron.io < 1.9.5 - Contributor+ Stored XSStarteaucitron.io
- CVE-2025-23252The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components.NVIDIA NVDebug tool
- CVE-2025-45661A cross-site scripting (XSS) vulnerability in miniTCG v1.3.1 beta allows attackers to execute abritrary web scripts or HTML via injecting a
- CVE-2025-49015The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates.CouchbaseNetClient