CVEs published September 4, 2025
268 CVEs were published on September 4, 2025: 15 critical, 113 high. 1 is now in CISA KEV.
- Published
- 268
- Critical
- 15
- High
- 113
- Medium
- 101
- Low
- 5
- Unrated
- 34
- Now in CISA KEV
- 1
- Fix available
- 52
Most affected products
- Google Android
- 129
- Linux
- 52
- appRain CMF
- 32
- CodeAstro Real Estate Management System
- 4
- docjojo atec Debug
- 3
- Akinsoft e-Mutabakat
- 2
- Akinsoft TaskPano
- 2
- IBM Jazz Foundation
- 2
- IBM Sterling B2B Integrator · IBM Sterling File Gateway
- 2
- MarceloTessaro promptcraft-forge-studio
- 2
Critical 15
- CVE-2025-55241Azure Entra ID Elevation of Privilege VulnerabilityMicrosoft Entra
- CVE-2025-54914Azure Networking Elevation of Privilege VulnerabilityMicrosoft Networking
- CVE-2025-55244Azure Bot Service Elevation of Privilege VulnerabilityMicrosoft Azure Bot Service
- CVE-2025-55190Argo CD: Project API Token Exposes Repository Credentialsargoproj argo-cd · github.com/argoproj/argo-cd/v2 +2
- CVE-2025-58361Promptcraft Forge Studio's incomplete URL check is vulnerable to XSS via SVGMarceloTessaro promptcraft-forge-studio
- CVE-2025-38728smb3: fix for slab out of bounds on mount to ksmbdLinux
- CVE-2025-38724nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()Linux
- CVE-2025-38708drbd: add missing kref_get in handle_write_conflictsLinux
- CVE-2025-8311dotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint.dotCMS Cloud Services
- CVE-2025-7385SQL Injection in GOV CMSConcept Intermedia GOV CMS
- CVE-2025-36904WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396458384.Google Android
- CVE-2025-36897In unknown of cd_CnMsgCodecUserApi.cpp, there is a possible out of bounds write due to a missing bounds check.Google Android
- CVE-2025-36896WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-394765106.Google Android
- CVE-2025-36890Elevation of PrivilegeGoogle Android
- CVE-2025-583575ire Chat Message XSS Vulnerability Enables Remote Code Executionnanbingxyz 5ire
High 113
- CVE-2025-58362Hono contains a flaw in URL path parsing, potentially leading to path confusionhonojs hono · hono
- CVE-2025-58179Astro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpointwithastro astro · @astrojs/cloudflare
- CVE-2025-55238Dynamics 365 FastTrack Implementation Assets Information Disclosure VulnerabilityMicrosoft Dynamics 365 FastTrack Implementation
- CVE-2025-32322In onCreate of MediaProjectionPermissionActivity.java , there is a possible way to grant a malicious app a token enabling unauthorized screeGoogle Android
- CVE-2025-58353Promptcraft Forge Studio: Complete Sanitizer Bypass Enables XSS via Overlapping PatternsMarceloTessaro promptcraft-forge-studio
- CVE-2025-26439In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to be enabled instead ofGoogle Android
- CVE-2025-26431In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility service due to a logicGoogle Android
- CVE-2025-22414In FrpBypassAlertActivity of FrpBypassAlertActivity.java, there is a possible way to bypass FRP due to a missing permission check.Google Android
- CVE-2025-48581In VerifyNoOverlapInSessions of apexd.cpp, there is a possible way to block security updates due to a logic error in the code.Google Android
- CVE-2025-48563In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value.Google Android
- CVE-2025-48558In multiple functions of BatteryService.java, there is a possible way to hijack implicit intent intended for system app due to Implicit inteGoogle Android
- CVE-2025-48556In multiple methods of NotificationChannel.java, there is a possible desynchronization from persistence due to improper input validation.Google Android
- CVE-2025-48553In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible DoS of a device admin due to a logic error in the code.Google Android
- CVE-2025-48552In saveGlobalProxyLocked of DevicePolicyManagerService.java, there is a possible way to desync from persistence due to a logic error in the Google Android
- CVE-2025-48549In multiple locations, there is a possible way to record audio via a background app due to a missing permission check.Google Android
- CVE-2025-48548In multiple functions of AppOpsControllerImpl.java, there is a possible way to record audio without displaying the privacy indicator due to Google Android
- CVE-2025-48547In multiple locations, there is a possible one-time permission bypass due to a logic error in the code.Google Android
- CVE-2025-48546In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2025-48545In isSystemUid of AccountManagerService.java, there is a possible way for an app to access privileged APIs due to a confused deputy.Google Android
- CVE-2025-48544In multiple locations, there is a possible way to read files belonging to other apps due to SQL injection.Google Android
- CVE-2025-48543In multiple locations, there is a possible way to escape chrome sandbox to attack android system_server due to a use after free.Google Android
- CVE-2025-48541In onCreate of FaceSettings.java, there is a possible way to remove biometric unlock across user profiles due to improper input validation.Google Android
- CVE-2025-48540In processTransactInternal of RpcState.cpp, there is a possible local out of memory write due to a logic error in the code.Google Android
- CVE-2025-48539In SendPacketToPeer of acl_arbiter.cc, there is a possible out of bounds read due to a use after free.Google Android
- CVE-2025-48537In multiple locations, there is a possible way to persistently DoS the device due to improper input validation.Google Android
- CVE-2025-48535In assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a lauGoogle Android
- CVE-2025-48534In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2025-48532In markMediaAsFavorite of MediaProvider.java, there is a possible way to bypass the WRITE_EXTERNAL_STORAGE permission due to a confused depuGoogle Android
- CVE-2025-48531In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2025-48523In onCreate of SelectAccountActivity.java, there is a possible way to add contacts without permission due to a logic error in the code.Google Android
- CVE-2025-48522In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code.Google Android
- CVE-2025-32350In maybeShowDialog of ControlsSettingsDialogManager.kt, there is a possible overlay of the ControlsSettingsDialog due to a tapjacking/overlaGoogle Android
- CVE-2025-32349In multiple locations, there is a possible privilege escalation due to a tapjacking/overlay attack.Google Android
- CVE-2025-32347In onStart of BiometricEnrollIntroduction.java, there is a possible way to determine the device's location due to an unsafe PendingIntent.Google Android
- CVE-2025-32346In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy.Google Android
- CVE-2025-32345In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary userGoogle Android
- CVE-2025-32333In startSpaActivityForApp of SpaActivity.kt, there is a possible cross-user permission bypass due to a logic error in the code.Google Android
- CVE-2025-32332In multiple locations, there is a possible memory corruption due to a use after free.Google Android
- CVE-2025-32331In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error in the code.Google Android
- CVE-2025-32327In multiple functions of PickerDbFacade.java, there is a possible unauthorized data access due to SQL injection.Google Android
- CVE-2025-32326In multiple functions of AppRestrictionsFragment.java, there is a possible way to bypass intent security check due to a confused deputy.Google Android
- CVE-2025-32325In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-32324In onCommand of ActivityManagerShellCommand.java, there is a possible arbitrary activity launch due to a confused deputy.Google Android
- CVE-2025-32323In getCallingAppName of Shared.java, there is a possible way to trick users into granting file access via deceptive text in a permission popGoogle Android
- CVE-2025-32321In isSafeIntent of AccountTypePreferenceLoader.java, there is a possible way to bypass an intent type check due to a confused deputy.Google Android
- CVE-2025-26464In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2025-26454In validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confusedGoogle Android
- CVE-2025-0089In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code.Google Android
- CVE-2024-49714In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-48533In multiple locations, there is a possible way to use apps linked from a context menu of a lockscreen app due to a race condition.Google Android
- CVE-2025-48530In multiple locations, there is a possible condition that results in OOB accesses due to an incorrect bounds check.Google Android
- CVE-2025-22441In getContextForResourcesEnsuringCorrectCachedApkPaths of RemoteViews.java, there is a possible way to load arbitrary java code in a privileGoogle Android
- CVE-2025-32312In createIntentsList of PackageParser.java , there is a possible way to bypass lazy bundle hardening, allowing modified data to be passed toGoogle Android
- CVE-2025-26462In AccessibilityServiceConnection.java, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2025-26458In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic error in the code.Google Android
- CVE-2025-26455In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-26452In loadDrawableForCookie of ResourcesImpl.java, there is a possible way to access task snapshots of other apps due to a confused deputy.Google Android
- CVE-2025-26450In onInputEvent of IInputMethodSessionWrapper.java, there is a possible way for an untrusted app to inject key and motion events to the defaGoogle Android
- CVE-2025-26443In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from unknown sources due to Google Android
- CVE-2025-26444In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly revert to the defaultGoogle Android
- CVE-2025-26440In multiple functions of CameraService.cpp, there is a possible way to use the camera from the background due to a permissions bypass.Google Android
- CVE-2025-26438In smp_process_secure_connection_oob_data of smp_act.cc, there is a possible way to bypass SMP authentication due to Incorrect implementatioGoogle Android
- CVE-2025-26436In clearAllowBgActivityStarts of PendingIntentRecord.java, there is a possible way for an application to launch an activity from the backgroGoogle Android
- CVE-2025-26435In updateState of ContentProtectionTogglePreferenceController.java, there is a possible way for a secondary user to disable the primary userGoogle Android
- CVE-2025-26430In getDestinationForApp of SpaAppBridgeActivity, there is a possible cross-user file reveal due to a logic error in the code.Google Android
- CVE-2025-9636Cross-Origin Opener Policy Vulnerability in pgAdmin 4pgadmin.org pgAdmin · pgadmin4
- CVE-2025-23258NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to NVIDIA DOCA with collectx-dpeserver
- CVE-2025-23257NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privNVIDIA DOCA with collectx-clxapidev
- CVE-2025-23256NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorizatiNVIDIA BlueField GA · NVIDIA BlueField LTS22 +2
- CVE-2025-38730io_uring/net: commit partial buffers on retryLinux
- CVE-2025-38722habanalabs: fix UAF in export_dmabuf()Linux
- CVE-2025-38718sctp: linearize cloned gso packets in sctp_rcvLinux
- CVE-2025-38717net: kcm: Fix race condition in kcm_unattach()Linux
- CVE-2025-38715hfs: fix slab-out-of-bounds in hfs_bnode_read()Linux
- CVE-2025-38714hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()Linux
- CVE-2025-38713hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()Linux
- CVE-2025-38710gfs2: Validate i_depth for exhash directoriesLinux
- CVE-2025-38707fs/ntfs3: Add sanity check for file nameLinux
- CVE-2025-38703drm/xe: Make dma-fences compliant with the safe access rulesLinux
- CVE-2025-38697jfs: upper bound check of tree index in dbAllocAGLinux
- CVE-2025-38688iommufd: Prevent ALIGN() overflowLinux
- CVE-2025-38687comedi: fix race between polling and detachingLinux
- CVE-2025-38685fbdev: Fix vmalloc out-of-bounds write in fast_imageblitLinux
- CVE-2025-38679media: venus: Fix OOB read due to missing payload bound checkLinux
- CVE-2025-7388Authenticated Command Injection via configuration parameter manipulation in exposed RMI interfaceProgress Software OpenEdge
- CVE-2025-41035Path Traversal vulnerability in appRain CMFappRain CMF
- CVE-2025-41034SQL injection vulnerability in appRain CMFappRain CMF
- CVE-2025-41033SQL injection vulnerability in appRain CMFappRain CMF
- CVE-2025-41032SQL injection vulnerability in appRain CMFappRain CMF
- CVE-2024-34598Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy StoSamsung Mobile GoodLock
- CVE-2025-6085Make Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Uploadintegromat Make Connector
- CVE-2025-2411OTP Bypass in Akinsoft's TaskPanoAkinsoft TaskPano
- CVE-2025-6984Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchainlangchain-ai/langchain · langchain-community
- CVE-2025-2417OTP Bypass in Akinsoft's e-MutabakatAkinsoft e-Mutabakat
- CVE-2025-36887In wl_cfgscan_update_v3_schedscan_results() of wl_cfgscan.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2024-56190In wl_update_hidden_ap_ie() of wl_cfgscan.c, there is a possible out of bounds write due to improper input validation.Google Android
- CVE-2025-36907In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-36906In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-36905In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code.Google Android
- CVE-2025-36903In lwis_io_buffer_write, there is a possible OOB read/write due to improper input validation.Google Android
- CVE-2025-36901WLAN in Android before 2025-09-05 on Google Pixel devices allows elevation of privilege, aka A-396462223.Google Android
- CVE-2025-36899There is a possible escalation of privilege due to test/debugging code left in a production build.Google Android
- CVE-2025-36898There is a possible escalation of privilege due to a logic error in the code.Google Android
- CVE-2025-36895Information disclosureGoogle Android
- CVE-2025-36894In TBD of TBD, there is a possible DoS due to a missing null check.Google Android
- CVE-2025-36892Denial of serviceGoogle Android
- CVE-2025-36891Elevation of privilegeGoogle Android
- CVE-2025-9519Easy Timer <= 4.2.1 - Authenticated (Editor+) Remote Code Execution via Shortcodekleor Easy Timer
- CVE-2025-9517atec Debug <= 1.2.22 - Authenticated (Administrator+) Remote Code Executiondocjojo atec Debug
- CVE-2025-9518atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Deletiondocjojo atec Debug
- CVE-2025-43772Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions Liferay Portal · Liferay DXP +1
- CVE-2025-58358Markdownify is vulnerable to command injection through pptx-to-markdown toolzcaceres markdownify-mcp · mcp-markdownify-server
- CVE-2025-57263An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via th
Medium, low and unrated 140
- CVE-2025-58359frost-core: refresh shares with smaller min_signers will reduce group securityZcashFoundation frost · frost-core
- CVE-2025-58352Weblate has long session expiry times during second factor verificationWeblateOrg weblate · weblate
- CVE-2025-55739api: Shared OAuth Signing Key Between Different InstancesFreePBX api
- CVE-2025-55242Xbox Certification Bug Copilot Djando Information Disclosure VulnerabilityMicrosoft Xbox Gaming Services
- CVE-2025-55305Electron is vulnerable to Code Injection via resource modificationelectron
- CVE-2025-55209FreePBX UCP is Vulnerable to Stored XSS Through its User Control PanelFreePBX contactmanager
- CVE-2025-26419In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code.Google Android
- CVE-2024-40664In setupAccessibilityServices of AccessibilityFragment.java , there is a possible way to hide an enabled accessibility service due to a logiGoogle Android
- CVE-2025-22415In android_app of Android.bp, there is a possible way to launch any activity as a system user.Google Android
- CVE-2024-49731In apk-versions.txt, there is a possible corruption of telemetry opt-in settings on other watches when setting up a new Pixel Watch due to aGoogle Android
- CVE-2025-48562In writeContent of RemotePrintDocument.java, there is a possible information disclosure due to a logic error.Google Android
- CVE-2025-48561In multiple locations, there is a possible way to access data displayed on the screen due to side channel information disclosure.Google Android
- CVE-2025-48560In AndroidManifest.xml, there is a possible way for an app to monitor motion events due to a confused deputy.Google Android
- CVE-2025-48559In multiple functions of AppOpsService.java, there is a possible add a large amount of app ops due to improper input validation.Google Android
- CVE-2025-48554In handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent denial of service due to a logic error in the coGoogle Android
- CVE-2025-48551In multiple locations, there is a possible leak of an image across the Android User isolation boundary due to a confused deputy.Google Android
- CVE-2025-48550In testGrantSlicePermission of SliceManagerTest.java, there is a possible permanent denial of service due to a path traversal error.Google Android
- CVE-2025-48542In multiple functions of AccountManagerService.java, there is a possible permanent denial of service due to resource exhaustion.Google Android
- CVE-2025-48538In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to impropeGoogle Android
- CVE-2025-48529In setRingtoneUri of VoicemailNotificationSettingsUtil.java , there is a possible cross user data leak due to a confused deputy.Google Android
- CVE-2025-48528In multiple locations, there is a possible way to overlay biometrics due to a tapjacking/overlay attack.Google Android
- CVE-2025-48527In multiple locations, there is a possible way to leak hidden work profile notifications due to a logic error in the code.Google Android
- CVE-2025-48526In createMultiProfilePagerAdapter of ChooserActivity.java , there is a possible way for an app to launch the ChooserActivity in another profGoogle Android
- CVE-2025-48524In isSystem of WifiPermissionsUtil.java, there is a possible permission bypass due to a missing permission check.Google Android
- CVE-2025-32330In generateRandomPassword of LocalBluetoothLeBroadcast.java, there is a possible way to intercept the Auracast audio stream due to an insecuGoogle Android
- CVE-2025-0076In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check.Google Android
- CVE-2025-26463In allowPackageAccess of multiple files, resource exhaustion is possible when repeatedly adding allowed packages.Google Android
- CVE-2025-26456In multiple functions of DexUseManagerLocal.java, there is a possible way to crash system server due to a logic error in the code.Google Android
- CVE-2025-26453In isContentUriForOtherUser of BluetoothOppSendFileInfo.java, there is a possible cross user data leak due to a logic error in the code.Google Android
- CVE-2025-26449In multiple locations, there is a possible permanent denial of service due to resource exhaustion.Google Android
- CVE-2025-26448In writeToParcel of CursorWindow.cpp, there is a possible out of bounds read due to uninitialized data.Google Android
- CVE-2025-26445In offerNetwork of ConnectivityService.java, there is a possible leak of sensitive data due to a missing permission check.Google Android
- CVE-2025-26441In add_attr of sdp_discovery.cc, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2025-26437In CredentialManagerServiceStub of CredentialManagerService.java, there is a possible way to retrieve candidate credentials due to a missingGoogle Android
- CVE-2025-26432In multiple locations, there is a possible way to persistently DoS the device due to a missing length check.Google Android
- CVE-2025-26442In onCreate of NotificationAccessConfirmationActivity.java, there is a possible incorrect verification of proper intent filters in NLS due tGoogle Android
- CVE-2025-26429In collectOps of AppOpsService.java, there is a possible way to cause permanent DoS due to improper input validation.Google Android
- CVE-2025-26428In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code.Google Android
- CVE-2025-26427In multiple locations, there is a possible Android/data access due to a path traversal error.Google Android
- CVE-2025-26426In BroadcastController.java of registerReceiverWithFeatureTraced, there is a possible way to receive broadcasts meant for the "android" packGoogle Android
- CVE-2025-26425In multiple functions of RoleService.java, there is a possible permission squatting vulnerability due to a logic error in the code.Google Android
- CVE-2025-26424In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code.Google Android
- CVE-2025-26423In validateIpConfiguration of WifiConfigurationUtil.java, there is a possible way to trigger a permanent DoS due to a missing bounds check.Google Android
- CVE-2025-26422In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permissionGoogle Android
- CVE-2025-26421In multiple locations, there is a possible lock screen bypass due to a logic error in the code.Google Android
- CVE-2025-26420In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission duGoogle Android
- CVE-2025-22425In onCreate of InstallStart.java, there is a possible permissions bypass due to improper input validation.Google Android
- CVE-2025-0087In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check.Google Android
- CVE-2025-0077In multiple functions of UserController.java, there is a possible lock screen bypass due to a race condition.Google Android
- CVE-2024-49739In MMapVAccess of pmr_os.c, there is a possible out of bounds write due to improper input validation.Google Android
- CVE-2023-35657In bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion.Google Android
- CVE-2025-23262NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorizatioNVIDIA ConnectX GA · NVIDIA ConnectX LTS22 +3
- CVE-2025-23261NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentNVIDIA NVOS · NVIDIA Cumulus Linux
- CVE-2025-23259NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause infoNVIDIA Mellanox DPDK · NVIDIA Upstream DPDK
- CVE-2025-23302NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the LS10 could enable an attacker to set an unsafe debug access levelNVIDIA HGX, DGX Hopper · NVIDIA HGX, DGX Blackwell
- CVE-2025-23301NVIDIA HGX and DGX contain a vulnerability where a misconfiguration of the VBIOS could enable an attacker to set an unsafe debug access leveNVIDIA HGX, DGX Hopper · NVIDIA HGX, DGX Blackwell
- CVE-2025-38729ALSA: usb-audio: Validate UAC3 power domain descriptors, tooLinux
- CVE-2025-38727netlink: avoid infinite retry looping in netlink_unicast()Linux
- CVE-2025-38726net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnectLinux
- CVE-2025-38725net: usb: asix_devices: add phy_mask for ax88772 mdio busLinux
- CVE-2025-38723LoongArch: BPF: Fix jump offset calculation in tailcallLinux
- CVE-2025-38721netfilter: ctnetlink: fix refcount leak on table dumpLinux
- CVE-2025-38720net: hibmcge: fix rtnl deadlock issueLinux
- CVE-2025-38719net: hibmcge: fix the division by zero issueLinux
- CVE-2025-38716hfs: fix general protection fault in hfs_find_init()Linux
- CVE-2025-38712hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()Linux
- CVE-2025-38711smb/server: avoid deadlock when linking with ReplaceIfExistsLinux
- CVE-2025-38709loop: Avoid updating block size under exclusive ownerLinux
- CVE-2025-38706ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()Linux
- CVE-2025-38705drm/amd/pm: fix null pointer accessLinux
- CVE-2025-38704rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer accessLinux
- CVE-2025-38702fbdev: fix potential buffer overflow in do_register_framebuffer()Linux
- CVE-2025-38701ext4: do not BUG when INLINE_DATA_FL lacks system.data xattrLinux
- CVE-2025-38700scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocatedLinux
- CVE-2025-38699scsi: bfa: Double-free fixLinux
- CVE-2025-38698jfs: Regular file corruption checkLinux
- CVE-2025-38696MIPS: Don't crash in stack_top() for tasks without ABI or vDSOLinux
- CVE-2025-38695scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structureLinux
- CVE-2025-38694media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()Linux
- CVE-2025-38693media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serparLinux
- CVE-2025-38692exfat: add cluster chain loop check for dirLinux
- CVE-2025-38691pNFS: Fix uninited ptr deref in block/scsi layoutLinux
- CVE-2025-38690drm/xe/migrate: prevent infinite recursionLinux
- CVE-2025-38689x86/fpu: Fix NULL dereference in avx512_status()Linux
- CVE-2025-38686userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entryLinux
- CVE-2025-38684net/sched: ets: use old 'nbands' while purging unused classesLinux
- CVE-2025-38683hv_netvsc: Fix panic during namespace deletion with VFLinux
- CVE-2025-38682i2c: core: Fix double-free of fwnode in i2c_unregister_device()Linux
- CVE-2025-38681mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()Linux
- CVE-2025-38680media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()Linux
- CVE-2025-25048IBM Jazz Foundation path traversalIBM Jazz Foundation
- CVE-2024-43184IBM Jazz Foundation cross-site scriptingIBM Jazz Foundation
- CVE-2025-2667IBM Sterling B2B Integrator information disclosureIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-2694IBM Sterling B2B Integrator cross-site scriptingIBM Sterling B2B Integrator · IBM Sterling File Gateway
- CVE-2025-6785Tesla Model 3 Physical CAN Bus InjectionTesla Model
- CVE-2025-41063Reflected Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41062Reflected Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41061Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41060Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41059Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41058Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41057Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41056Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41055Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41054Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41053Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41052Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41051Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41050Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41049Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41048Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41047Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41046Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41045Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41044Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41043Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41042Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41041Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41040Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41039Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41038Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41037Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2025-41036Stored Cross-Site Scripting vulnerability in appRain CMFappRain CMF
- CVE-2022-39888Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to accessSamsung Mobile Devices
- CVE-2025-9616PopAd <= 1.0.4 - Cross-Site Request Forgery to Settings Updatealobaidi PopAd
- CVE-2024-13073XSS in Akinsoft's TaskPanoAkinsoft TaskPano
- CVE-2024-13071XSS in Akinsoft's e-MutabakatAkinsoft e-Mutabakat
- CVE-2025-9467Possibility to bypass file upload validation on the server-sidevaadin · vaadin-upload-flow +1
- CVE-2024-56189In SAEMM_DiscloseMsId of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check.Google Android
- CVE-2025-36909Information disclosureGoogle Android
- CVE-2025-36908In lwis_top_register_io of lwis_device_top.c, there is a possible out of bounds write due to an incorrect bounds check.Google Android
- CVE-2025-36902In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow.Google Android
- CVE-2025-36900In lwis_test_register_io of lwis_device_test.c, there is a possible OOB Write due to an integer overflow.Google Android
- CVE-2025-36893In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data.Google Android
- CVE-2025-9516atec Debug <= 1.2.22 - Authenticated (Administrator+) Arbitrary File Readdocjojo atec Debug
- CVE-2025-9942CodeAstro Real Estate Management System submitproperty.php unrestricted uploadCodeAstro Real Estate Management System
- CVE-2025-9941CodeAstro Real Estate Management System register.php unrestricted uploadCodeAstro Real Estate Management System
- CVE-2025-9940CodeAstro Real Estate Management System feature.php cross site scriptingCodeAstro Real Estate Management System
- CVE-2025-9939CodeAstro Real Estate Management System propertyview.php cross site scriptingCodeAstro Real Estate Management System
- CVE-2025-57576PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.