CVEs published September 15, 2025
407 CVEs were published on September 15, 2025: 18 critical, 99 high.
- Published
- 407
- Critical
- 18
- High
- 99
- Medium
- 156
- Low
- 14
- Unrated
- 120
- Now in CISA KEV
- 0
- Fix available
- 182
Most affected products
- Linux
- 210
- Apple macOS
- 48
- Apple iOS and iPadOS · Apple macOS +3
- 11
- Liferay Portal · Liferay DXP +1
- 7
- SourceCodester Online Student File Management System
- 5
- SourceCodester Pet Grooming Management Software
- 5
- Apple iOS and iPadOS · Apple macOS
- 4
- Apple iOS and iPadOS · Apple macOS +2
- 4
- Apple Xcode
- 4
- Campcodes Computer Sales and Inventory System
- 4
Critical 18
- CVE-2025-43343The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43359A logic issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43362The issue was addressed with improved checks.Apple iOS and iPadOS
- CVE-2025-43342A correctness issue was addressed with improved checks.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-31255An authorization issue was addressed with improved state management.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43347This issue was addressed by removing the vulnerable code.Apple iOS and iPadOS · Apple macOS +3
- CVE-2022-503359p: set req refcount to zero to avoid uninitialized usageLinux
- CVE-2023-53192vxlan: Fix nexthop hash sizeLinux
- CVE-2022-50235NFSD: Protect against send buffer overflow in NFSv2 READDIRLinux
- CVE-2025-59361OS command injection in Chaos Mesh via the cleanIptables mutationgithub.com/chaos-mesh/chaos-mesh
- CVE-2025-59360OS command injection in Chaos Mesh via the killProcesses mutationgithub.com/chaos-mesh/chaos-mesh
- CVE-2025-59359OS command injection in Chaos Mesh via the cleanTcs mutationgithub.com/chaos-mesh/chaos-mesh
- CVE-2025-10432Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflowTenda AC1206
- CVE-2025-10452Gotac｜Statistical Database System - Missing AuthenticationGotac Statistical Database System
- CVE-2025-46408An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpC
- CVE-2025-52053TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name
- CVE-2025-57118An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php
- CVE-2025-57174An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previo
High 99
- CVE-2025-43298A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2025-43304A race condition was addressed with improved state handling.Apple macOS
- CVE-2025-43329A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43333A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43375The issue was addressed with improved checks.Apple Xcode
- CVE-2025-31271This issue was addressed through improved state management.Apple macOS
- CVE-2025-43358A permissions issue was addressed with additional sandbox restrictions.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43204This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-43341A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43316A permissions issue was addressed with additional restrictions.Apple macOS · Apple visionOS
- CVE-2025-43286A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-24088The issue was addressed by adding additional logic.Apple macOS
- CVE-2025-43287The issue was addressed with improved memory handling.Apple macOS
- CVE-2025-43340A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43330This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-43263The issue was addressed with improved checks.Apple Xcode
- CVE-2025-43371This issue was addressed with improved checks.Apple Xcode
- CVE-2025-59145color-name@2.0.1 contains malware after npm account takeovercolorjs color-name · color-name
- CVE-2025-593323DAlloy allows stored XSS through attributes provided to the 3d parser tag/functiondolfinus 3DAlloy
- CVE-2025-59331is-arrayish@0.3.3 contains malware after npm account takeoverQix- node-is-arrayish · is-arrayish
- CVE-2025-59330error-ex@1.3.3 contains malware after npm account takeoverQix- node-error-ex · error-ex
- CVE-2025-59162color-convert@3.1.1 contains malware after npm account takeoverQix- color-convert · color-convert
- CVE-2025-59142color-string@2.1.1 contains malware after npm account takeoverQix- color-string · color-string
- CVE-2025-59144debug@4.4.2 contains malware after npm account takeoverdebug-js debug · debug
- CVE-2025-59143color@5.0.1 contains malware after npm account takeoverQix- color · color
- CVE-2025-59141simple-swizzle@0.2.3 contains malware after npm account takeoverQix- node-simple-swizzle · simple-swizzle
- CVE-2025-59140backslash@0.2.1 contains malware after npm account takeoverQix- node-backslash · backslash
- CVE-2025-10203Relative Path Traversal Vulnerability in Digilent WaveFormsDigilent WaveForms
- CVE-2025-58748Dataease H2 data source JDBC URL validation bypass leads to remote code executiondataease
- CVE-2025-10491MongoDB Windows installation MSI may leave ACLs unset on custom installation directoriesMongoDB Server
- CVE-2025-58046Dataease has a JDBC attack vulnerability in the Impala datasourcedataease
- CVE-2025-58045Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameterdataease
- CVE-2025-6202Phoenix: Rowhammer attack on Hynix DDR5 devicesSK Hynix DDR5
- CVE-2022-50333fs: jfs: fix shift-out-of-bounds in dbDiscardAGLinux
- CVE-2022-50330crypto: cavium - prevent integer overflow loading firmwareLinux
- CVE-2022-50329block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqqLinux
- CVE-2022-50328jbd2: fix potential use-after-free in jbd2_fc_wait_bufsLinux
- CVE-2022-50325ASoC: Intel: avs: Fix potential RX buffer overflowLinux
- CVE-2023-53262f2fs: fix scheduling while atomic in decompression pathLinux
- CVE-2023-53257wifi: mac80211: check S1G action frame sizeLinux
- CVE-2023-53254cacheinfo: Fix shared_cpu_map to handle shared caches at different levelsLinux
- CVE-2023-53253HID: nvidia-shield: Reference hid_device devm allocation of input_dev nameLinux
- CVE-2023-53252Bluetooth: use RCU for hci_conn_params and iterate safely in hci_syncLinux
- CVE-2022-50315ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTSLinux
- CVE-2022-50310ip6mr: fix UAF issue in ip6mr_sk_done() when addrconf_init_net() failedLinux
- CVE-2022-50306ext4: fix potential out of bound read in ext4_fc_replay_scan()Linux
- CVE-2022-50303drm/amdkfd: Fix double release compute pasidLinux
- CVE-2022-50302lockd: set other missing fields when unlocking filesLinux
- CVE-2022-50300btrfs: fix extent map use-after-free when handling missing device in read_one_chunkLinux
- CVE-2023-53242thermal/drivers/hisi: Drop second sensor hi3660Linux
- CVE-2023-53238phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()Linux
- CVE-2023-53236iommufd: Do not corrupt the pfn list when doing batch carryLinux
- CVE-2023-53235drm/tests: helpers: Avoid a driver uafLinux
- CVE-2023-53229wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded staLinux
- CVE-2023-53226wifi: mwifiex: Fix OOB and integer underflow when rx packetsLinux
- CVE-2023-53222jfs: jfs_dmap: Validate db_l2nbperpage while mountingLinux
- CVE-2023-53219media: netup_unidvb: fix use-after-free at del_timer()Linux
- CVE-2023-53218rxrpc: Make it so that a waiting process can be abortedLinux
- CVE-2023-53217nubus: Partially revert proc_create_single_data() conversionLinux
- CVE-2023-53216arm64: efi: Make efi_rt_lock a raw_spinlockLinux
- CVE-2023-53215sched/fair: Don't balance task to its current running CPULinux
- CVE-2023-53214f2fs: fix to avoid potential memory corruption in __update_iostat_latency()Linux
- CVE-2023-53213wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()Linux
- CVE-2023-53205KVM: s390/diag: fix racy access of physical cpu number in diag 9c handlerLinux
- CVE-2022-50286ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inlineLinux
- CVE-2022-50283mtd: core: add missing of_node_get() in dynamic partitions codeLinux
- CVE-2022-50274media: dvbdev: adopts refcnt to avoid UAFLinux
- CVE-2022-50270f2fs: fix the assign logic of iocbLinux
- CVE-2023-53194fs/ntfs3: Add length check in indx_get_rootLinux
- CVE-2023-53189ipv6/addrconf: fix a potential refcount underflow for idevLinux
- CVE-2023-53187btrfs: fix use-after-free of new block group that became unusedLinux
- CVE-2023-53186skbuff: Fix a race between coalescing and releasing SKBsLinux
- CVE-2023-53184arm64/sme: Set new vector length before reallocatingLinux
- CVE-2023-53179netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.cLinux
- CVE-2023-53178mm: fix zswap writeback race conditionLinux
- CVE-2023-53176serial: 8250: Reinit port->pm on port specific driver unbindLinux
- CVE-2023-53170net: dsa: Removed unneeded of_node_put in felix_parse_ports_nodeLinux
- CVE-2022-50259bpf, sockmap: fix race in sock_map_free()Linux
- CVE-2022-50255tracing: Fix reading strings from synthetic eventsLinux
- CVE-2022-50252igb: Do not free q_vector unless new one was allocatedLinux
- CVE-2022-50248wifi: iwlwifi: mvm: fix double free on tx path.Linux
- CVE-2022-50243sctp: handle the error returned from sctp_auth_asoc_init_active_keyLinux
- CVE-2022-50241NFSD: fix use-after-free on source server when doing inter-server copyLinux
- CVE-2022-50240android: binder: stop saving a pointer to the VMALinux
- CVE-2022-50234io_uring/af_unix: defer registered files gc to io_uring releaseLinux
- CVE-2025-39804lib/crypto: arm64/poly1305: Fix register corruption in no-SIMD contextsLinux
- CVE-2025-39802lib/crypto: arm/poly1305: Fix register corruption in no-SIMD contextsLinux
- CVE-2025-39800btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()Linux
- CVE-2025-3025CCleaner Link Following Local Privilege Escalation VulnerabilityGen Digital CCleaner
- CVE-2025-59358Denial of Service via Unauthorized Access to Chaos Mesh debugging servergithub.com/chaos-mesh/chaos-mesh
- CVE-2025-10443Tenda AC9/AC15 exeCommand formexeCommand buffer overflowTenda AC9 · Tenda AC15
- CVE-2025-9072One-Click Mattermost Account Takeover via Poisoned RelayState SAML ParameterMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-9826Stored cross-site scripting vulnerability in M-Files Hubshare before version 25.8 allows authenticated attackers to cause script execution fM-Files Hubshare
- CVE-2025-50110An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse m
- CVE-2025-50944An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0.
- CVE-2025-56274SourceCodester Web-based Pharmacy Product Management System 1.0 is vulnerable to Incorrect Access Control, which allows low-privileged users
- CVE-2025-56710A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Profile Page of the PHPGurukul Student-Result-Management-System-Usin
- CVE-2025-57248A null pointer dereference vulnerability was discovered in SumatraPDF 3.5.2 during the processing of a crafted .djvu file.
- CVE-2025-59375libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsilibexpat project libexpat
Medium, low and unrated 290
- CVE-2025-43332A file quarantine bypass was addressed with additional checks.Apple macOS
- CVE-2025-43349An out-of-bounds write issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43308This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2025-43328A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43294An issue existed in the handling of environment variables.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43369This issue was addressed with improved handling of symlinks.Apple macOS
- CVE-2025-43312A buffer overflow was addressed with improved bounds checking.Apple macOS
- CVE-2025-43353The issue was addressed with improved bounds checks.Apple macOS
- CVE-2025-43305A logic issue was addressed with improved checks.Apple macOS
- CVE-2025-43344An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43190A parsing issue in the handling of directory paths was addressed with improved path validation.Apple iOS and iPadOS · Apple macOS +2
- CVE-2025-43368A use-after-free issue was addressed with improved memory management.Apple Safari · Apple iOS and iPadOS +1
- CVE-2025-43295A denial-of-service issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43283An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2025-43299A denial-of-service issue was addressed with improved validation.Apple iOS and iPadOS · Apple macOS
- CVE-2025-43325An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2025-43372The issue was addressed with improved input validation.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43292A race condition was addressed with improved state handling.Apple macOS
- CVE-2025-43314A parsing issue in the handling of directory paths was addressed with improved path validation.Apple macOS
- CVE-2025-43355A type confusion issue was addressed with improved memory handling.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43302An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43318This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2025-43319This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-31270A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43231A logic issue was addressed with improved checks.Apple macOS
- CVE-2025-43303A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43354A logging issue was addressed with improved data redaction.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43207This issue was addressed with improved entitlements.Apple macOS
- CVE-2025-43315This issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-43293The issue was addressed with improved input validation.Apple macOS
- CVE-2025-43285A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43357This issue was addressed with improved redaction of sensitive information.Apple iOS and iPadOS · Apple macOS
- CVE-2025-31269A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43208A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43321The issue was resolved by blocking unsigned services from launching on Intel Macs.Apple macOS
- CVE-2025-43337An access issue was addressed with additional sandbox restrictions.Apple macOS
- CVE-2025-43272The issue was addressed with improved memory handling.Apple Safari · Apple iOS and iPadOS +3
- CVE-2025-31268A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43291A permissions issue was addressed by removing the vulnerable code.Apple macOS
- CVE-2025-24197A logic issue was addressed with improved checks.Apple macOS
- CVE-2025-43317A permissions issue was addressed with additional restrictions.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-43356The issue was addressed with improved handling of caches.Apple Safari · Apple iOS and iPadOS +4
- CVE-2025-43301A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2025-43367A privacy issue was addressed by moving sensitive data.Apple macOS
- CVE-2025-43326An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2025-43310A configuration issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43279A privacy issue was addressed with improved private data redaction for log entries.Apple macOS
- CVE-2025-30468This issue was addressed through improved state management.Apple iOS and iPadOS
- CVE-2025-43297A type confusion issue was addressed with improved memory handling.Apple macOS
- CVE-2025-43311This issue was addressed with additional entitlement checks.Apple macOS
- CVE-2025-43203The issue was addressed with improved handling of caches.Apple iOS and iPadOS
- CVE-2025-43346An out-of-bounds access issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS +3
- CVE-2025-31254This issue was addressed with improved URL validation.Apple Safari · Apple iOS and iPadOS
- CVE-2025-43307This issue was addressed with improved checks to prevent unauthorized actions.Apple macOS
- CVE-2025-43370A path handling issue was addressed with improved validation.Apple Xcode
- CVE-2025-43327The issue was addressed by adding additional logic.Apple Safari · Apple macOS
- CVE-2025-43262A permissions issue was addressed with additional restrictions.Apple macOS
- CVE-2025-43331A downgrade issue was addressed with additional code-signing restrictions.Apple macOS
- CVE-2025-43366An out-of-bounds read was addressed with improved bounds checking.Apple macOS
- CVE-2025-10485pojoin h3blog HTTP Header login ppt_log cross site scriptingpojoin h3blog
- CVE-2025-10483SourceCodester Online Student File Management System save_user.php sql injectionSourceCodester Online Student File Management System
- CVE-2025-10482SourceCodester Online Student File Management System index.php sql injectionSourceCodester Online Student File Management System
- CVE-2025-10481SourceCodester Online Student File Management System remove_file.php sql injectionSourceCodester Online Student File Management System
- CVE-2025-43802Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/<object-name> API endpoint in Liferay Portal 7.4.3.51 through 7.4.Liferay Portal · Liferay DXP +1
- CVE-2025-10480SourceCodester Online Student File Management System save_file.php unrestricted uploadSourceCodester Online Student File Management System
- CVE-2025-43797In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through Liferay Portal · Liferay DXP +1
- CVE-2025-6947WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy ConfigurationWatchGuard Fireware OS
- CVE-2025-6999WatchGuard Firebox Authentication Portal Request Smuggling VulnerabilityWatchGuard Fireware OS
- CVE-2025-59056FreePBX vulnerable to unauthenticated Denial of ServiceFreePBX framework
- CVE-2025-10479SourceCodester Online Student File Management System index.php sql injectionSourceCodester Online Student File Management System
- CVE-2025-55211FreePBX Post-Authenticated Command InjectionFreePBX framework
- CVE-2025-43798Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time passwLiferay DXP · com.liferay:com.liferay.multi.factor.authenti…
- CVE-2025-10477kidaze CourseSelectionSystem eligibility.php sql injectionkidaze CourseSelectionSystem
- CVE-2025-43799Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA throuLiferay Portal · Liferay DXP +1
- CVE-2025-59154Openfire allows potential identity spoofing via unsafe CN parsingigniterealtime Openfire · org.igniterealtime.openfire:xmpps…
- CVE-2025-10475SpyShelter IOCTL SpyShelter.sys denial of serviceSpyShelter
- CVE-2025-43800Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 throuLiferay Portal · Liferay DXP +1
- CVE-2025-10473yangzongzhuan RuoYi Blacklist SqlUtil.java filterKeyword sql injectionyangzongzhuan RuoYi
- CVE-2025-10472harry0703 MoneyPrinterTurbo URL video.py stream_video path traversalharry0703 MoneyPrinterTurbo
- CVE-2025-43791Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through Liferay Portal · Liferay DXP +1
- CVE-2025-59155hackmd-mcp server-side request forgery in HTTP transport modeyuna0x0 hackmd-mcp · hackmd-mcp
- CVE-2025-58177n8n stored cross-site scripting in LangChain Chat Trigger node initialMessages parametern8n-io n8n · n8n
- CVE-2025-58172drawnix debug logging cross-site scripting vulnerabilityplait-board drawnix
- CVE-2025-10471ZKEACMS MediaController.cs Proxy server-side request forgeryZKEACMS
- CVE-2025-59328Apache Fory: Denial of Service (DoS) due to Deserialization of Untrusted malicious large DataApache Software Foundation Apache Fory · org.apache.fory:fo…
- CVE-2025-43792Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Liferay Portal · Liferay DXP +1
- CVE-2025-43793Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA throuLiferay Portal · Liferay DXP +2
- CVE-2025-36082IBM OpenPages information disclosureIBM OpenPages
- CVE-2025-10459PHPGurukul Beauty Parlour Management System all-appointment.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2022-50337ocxl: fix pci device refcount leak when calling get_function_0()Linux
- CVE-2022-50336fs/ntfs3: Add null pointer check to attr_load_runs_vcnLinux
- CVE-2022-50334hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param()Linux
- CVE-2022-50332video/aperture: Call sysfb_disable() before removing PCI devicesLinux
- CVE-2022-50331wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new()Linux
- CVE-2022-50327ACPI: processor: idle: Check acpi_fetch_acpi_dev() return valueLinux
- CVE-2022-50326media: airspy: fix memory leak in airspy probeLinux
- CVE-2022-50324mtd: maps: pxa2xx-flash: fix memory leak in probeLinux
- CVE-2022-50323net: do not sense pfmemalloc status in skb_append_pagefrags()Linux
- CVE-2022-50322rtc: msc313: Fix function prototype mismatch in msc313_rtc_probe()Linux
- CVE-2022-50321wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()Linux
- CVE-2022-50320ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys addressLinux
- CVE-2022-50319coresight: trbe: remove cpuhp instance node before remove cpuhp stateLinux
- CVE-2022-50318perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox()Linux
- CVE-2022-50317drm/bridge: megachips: Fix a null pointer dereference bugLinux
- CVE-2022-50316orangefs: Fix kmemleak in orangefs_sysfs_init()Linux
- CVE-2023-53261coresight: Fix memory leak in acpi_buffer->pointerLinux
- CVE-2023-53260ovl: fix null pointer dereference in ovl_permission()Linux
- CVE-2023-53259VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPFLinux
- CVE-2023-53258drm/amd/display: Fix possible underflow for displays with large vblankLinux
- CVE-2023-53256firmware: arm_ffa: Fix FFA device names for logical partitionsLinux
- CVE-2023-53255firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()Linux
- CVE-2023-53251wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()Linux
- CVE-2023-53250firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handleLinux
- CVE-2023-53249clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probeLinux
- CVE-2023-53248drm/amdgpu: install stub fence into potential unused fence pointersLinux
- CVE-2023-53247btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expandLinux
- CVE-2023-53246cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALLLinux
- CVE-2023-53245scsi: storvsc: Fix handling of virtual Fibre Channel timeoutsLinux
- CVE-2023-53244media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finishLinux
- CVE-2023-53243btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profileLinux
- CVE-2022-50314nbd: Fix hung when signal interrupts nbd_start_device_ioctl()Linux
- CVE-2022-50313erofs: fix order >= MAX_ORDER warning due to crafted negative i_sizeLinux
- CVE-2022-50312drivers: serial: jsm: fix some leaks in probeLinux
- CVE-2022-50311cxl: Fix refcount leak in cxl_calc_capp_routingLinux
- CVE-2022-50309media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_initLinux
- CVE-2022-50308ASoC: qcom: Add checks for devm_kcallocLinux
- CVE-2022-50307s390/cio: fix out-of-bounds access on cio_ignore freeLinux
- CVE-2022-50305ASoC: sof_es8336: fix possible use-after-free in sof_es8336_remove()Linux
- CVE-2022-50304mtd: core: fix possible resource leak in init_mtd()Linux
- CVE-2022-50301iommu/omap: Fix buffer overflow in debugfsLinux
- CVE-2022-50299md: Replace snprintf with scnprintfLinux
- CVE-2022-50298slimbus: qcom-ngd: cleanup in probe error pathLinux
- CVE-2022-50297wifi: ath9k: verify the expected usb_endpoints are presentLinux
- CVE-2022-50296UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACKLinux
- CVE-2022-50295io_uring/msg_ring: Fix NULL pointer dereference in io_msg_send_fd()Linux
- CVE-2022-50294wifi: libertas: fix memory leak in lbs_init_adapter()Linux
- CVE-2022-50293btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a rangeLinux
- CVE-2022-50292drm/msm/dp: fix bridge lifetimeLinux
- CVE-2022-50291kcm: annotate data-races around kcm->rx_psockLinux
- CVE-2023-53241nfsd: call op_release, even when op_func returns an errorLinux
- CVE-2023-53240xsk: check IFF_UP earlier in Tx pathLinux
- CVE-2023-53239drm/msm/mdp5: Add check for kzallocLinux
- CVE-2023-53237drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_finiLinux
- CVE-2023-53234watchdog: Fix kmemleak in watchdog_cdev_registerLinux
- CVE-2023-53233net/smc: fix deadlock triggered by cancel_delayed_work_syn()Linux
- CVE-2023-53232mt76: mt7921: fix kernel panic by accessing unallocated eeprom.dataLinux
- CVE-2023-53231erofs: Fix detection of atomic contextLinux
- CVE-2023-53230smb: client: fix warning in cifs_smb3_do_mount()Linux
- CVE-2023-53228drm/amdgpu: drop redundant sched job cleanup when cs is abortedLinux
- CVE-2023-53225spi: imx: Don't skip cleanup in remove's error pathLinux
- CVE-2023-53224ext4: Fix function prototype mismatch for ext4_feat_ktypeLinux
- CVE-2023-53223drm/msm/dsi: Add missing check for alloc_ordered_workqueueLinux
- CVE-2023-53221bpf: Fix memleak due to fentry attach failureLinux
- CVE-2023-53220media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()Linux
- CVE-2023-53211driver core: location: Free struct acpi_pld_info *pld before return falseLinux
- CVE-2023-53210md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid()Linux
- CVE-2023-53209wifi: mac80211_hwsim: Fix possible NULL dereferenceLinux
- CVE-2023-53208KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 stateLinux
- CVE-2023-53207ublk: fail to recover device if queue setup is interruptedLinux
- CVE-2023-53206hwmon: (pmbus_core) Fix NULL pointer dereferenceLinux
- CVE-2023-53204af_unix: Fix data-races around user->unix_inflight.Linux
- CVE-2023-53203wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_valLinux
- CVE-2023-53202PM: domains: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53201RDMA/bnxt_re: wraparound mbox producer indexLinux
- CVE-2023-53200netfilter: x_tables: fix percpu counter block leak on error path when creating new netnsLinux
- CVE-2023-53199wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() failsLinux
- CVE-2022-50289ocfs2: fix memory leak in ocfs2_stack_glue_init()Linux
- CVE-2022-50288qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failureLinux
- CVE-2022-50287drm/i915/bios: fix a memory leak in generate_lfp_data_ptrsLinux
- CVE-2022-50285mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pagesLinux
- CVE-2022-50284ipc: fix memory leak in init_mqueue_fs()Linux
- CVE-2022-50282chardev: fix error handling in cdev_device_add()Linux
- CVE-2022-50281MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create()Linux
- CVE-2022-50280pnode: terminate at peers of sourceLinux
- CVE-2022-50279wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()Linux
- CVE-2022-50278PNP: fix name memory leak in pnp_alloc_dev()Linux
- CVE-2022-50277ext4: don't allow journal inode to have encrypt flagLinux
- CVE-2022-50276power: supply: fix null pointer dereferencing in power_supply_get_battery_infoLinux
- CVE-2022-50275drm/radeon: Add the missed acpi_put_table() to fix memory leakLinux
- CVE-2022-50273f2fs: fix to do sanity check on destination blkaddr during recoveryLinux
- CVE-2022-50272media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer()Linux
- CVE-2022-50271vhost/vsock: Use kvmalloc/kvfree for larger packets.Linux
- CVE-2022-50269drm/vkms: Fix memory leak in vkms_init()Linux
- CVE-2022-50268mmc: moxart: fix return value check of mmc_add_host()Linux
- CVE-2022-50267mmc: rtsx_pci: fix return value check of mmc_add_host()Linux
- CVE-2022-50266kprobes: Fix check for probe enabled in kill_kprobe()Linux
- CVE-2022-50265kcm: annotate data-races around kcm->rx_waitLinux
- CVE-2022-50264clk: socfpga: Fix memory leak in socfpga_gate_init()Linux
- CVE-2022-50263vdpasim: fix memory leak when freeing IOTLBsLinux
- CVE-2022-50262fs/ntfs3: Validate BOOT record_sizeLinux
- CVE-2025-8396Insufficiently specific bounds checking on authorization header could lead to denial of service in the Temporal server on all platforms due Temporal OSS Server · go.temporal.io/server
- CVE-2023-53198raw: Fix NULL deref in raw_get_next().Linux
- CVE-2023-53197USB: uhci: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53196usb: dwc3: qcom: Fix potential memory leakLinux
- CVE-2023-53195mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_initLinux
- CVE-2023-53193drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_finiLinux
- CVE-2023-53191irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domainsLinux
- CVE-2023-53190vxlan: Fix memory leaks in error pathLinux
- CVE-2023-53188net: openvswitch: fix race on port outputLinux
- CVE-2023-53185wifi: ath9k: don't allow to overwrite ENDPOINT0 attributesLinux
- CVE-2023-53182ACPICA: Avoid undefined behavior: applying zero offset to null pointerLinux
- CVE-2023-53181dma-buf/dma-resv: Stop leaking on krealloc() failureLinux
- CVE-2023-53180wifi: ath12k: Avoid NULL pointer access during management transmit cleanupLinux
- CVE-2023-53177media: hi846: fix usage of pm_runtime_get_if_in_use()Linux
- CVE-2023-53175PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernationLinux
- CVE-2023-53174scsi: core: Fix possible memory leak if device_add() failsLinux
- CVE-2023-53173tty: pcn_uart: fix memory leak with using debugfs_lookup()Linux
- CVE-2023-53172fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fdsLinux
- CVE-2023-53171vfio/type1: prevent underflow of locked_vm via exec()Linux
- CVE-2023-53169x86/resctrl: Clear staged_config[] before and after it is usedLinux
- CVE-2023-53168usb: ucsi_acpi: Increase the command completion timeoutLinux
- CVE-2023-53167tracing: Fix null pointer dereference in tracing_err_log_open()Linux
- CVE-2023-53166power: supply: bq25890: Fix external_power_changed raceLinux
- CVE-2023-53165udf: Fix uninitialized array access for some pathnamesLinux
- CVE-2023-53164irqchip/ti-sci: Fix refcount leak in ti_sci_intr_irq_domain_probeLinux
- CVE-2023-53163fs/ntfs3: don't hold ni_lock when calling truncate_setsize()Linux
- CVE-2023-53153wifi: cfg80211: Fix use after free for wextLinux
- CVE-2023-53152drm/amdgpu: fix calltrace warning in amddrm_buddy_finiLinux
- CVE-2023-53151md/raid10: prevent soft lockup while flush writesLinux
- CVE-2023-53150scsi: qla2xxx: Pointer may be dereferencedLinux
- CVE-2023-53149ext4: avoid deadlock in fs reclaim with page writebackLinux
- CVE-2023-53148igb: Fix igb_down hung on surprise removalLinux
- CVE-2023-53147xfrm: add NULL check in xfrm_update_ae_paramsLinux
- CVE-2022-50261drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid()Linux
- CVE-2022-50260drm/msm: Make .remove and .shutdown HW shutdown consistentLinux
- CVE-2022-50258wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()Linux
- CVE-2022-50257xen/gntdev: Prevent leaking grantsLinux
- CVE-2022-50256drm/meson: remove drm bridges at aggregate driver unbind timeLinux
- CVE-2022-50254media: ov8865: Fix an error handling path in ov8865_probe()Linux
- CVE-2022-50253bpf: make sure skb->len != 0 when redirecting to a tunneling deviceLinux
- CVE-2022-50251mmc: vub300: fix return value check of mmc_add_host()Linux
- CVE-2022-50250regulator: core: fix use_count leakage when handling boot-onLinux
- CVE-2022-50249memory: of: Fix refcount leak bug in of_get_ddr_timings()Linux
- CVE-2025-10448Campcodes Online Job Finder System index.php sql injectionCampcodes Online Job Finder System
- CVE-2022-50247usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irqLinux
- CVE-2022-50246usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()Linux
- CVE-2022-50245rapidio: fix possible UAF when kfifo_alloc() failsLinux
- CVE-2022-50244cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter()Linux
- CVE-2022-50242drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init()Linux
- CVE-2022-50239cpufreq: qcom: fix writes in read-only memory regionLinux
- CVE-2022-50236iommu/mediatek: Fix crash on isr after kexec()Linux
- CVE-2025-10447Campcodes Online Job Finder System applicationform.php unrestricted uploadCampcodes Online Job Finder System
- CVE-2025-10446Campcodes Computer Sales and Inventory System cust_searchfrm.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-39803scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl()Linux
- CVE-2025-39801usb: dwc3: Remove WARN_ON for device endpoint command timeoutsLinux
- CVE-2025-10445Campcodes Computer Sales and Inventory System us_transac.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-10444Campcodes Online Job Finder System advancesearch.php sql injectionCampcodes Online Job Finder System
- CVE-2025-43794Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2Liferay Portal · Liferay DXP +1
- CVE-2025-10442Tenda AC9/AC15 exeCommand formexeCommand os command injectionTenda AC9 · Tenda AC15
- CVE-2025-10441D-Link DI-8100G/DI-8200G/DI-8003G jhttpd version_upgrade.asp sub_433F7C os command injectionD-Link DI-8100G · D-Link DI-8200G +1
- CVE-2025-9084Open redirect in OAuth loginMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-9078Weak cache keys lead to post IDOR and link preview poisoningMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-9076Mattermost Server exposes sensitive user credentials during shared channel membership synchronizationMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-10440D-Link DI-8100/DI-8100G/DI-8200/DI-8200G/DI-8003/DI-8003G jhttpd usb_paswd.asp sub_4621DC os command injectionD-Link DI-8100 · D-Link DI-8100G +4
- CVE-2025-10436Campcodes Computer Sales and Inventory System sup_searchfrm.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-10435Campcodes Computer Sales and Inventory System cust_edit1.php sql injectionCampcodes Computer Sales and Inventory System
- CVE-2025-10434IbuyuCMS Add Article article.php cross site scriptingIbuyuCMS
- CVE-2025-104331Panel-dev MaxKB debug deserialization1Panel-dev MaxKB
- CVE-2025-41713WAGO: Vulnerability in hardware switch circuitWAGO CC100 0751-9301 · WAGO CC100 0751-9301/K000-0005 +22
- CVE-2025-10431SourceCodester Pet Grooming Management Software ajax_represent.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10430SourceCodester Pet Grooming Management Software barcode.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10453PilotGaea Technologies｜O'View MapServer - Server-Side Request ForgeryPilotGaea Technologies O'View MapServer
- CVE-2025-10429SourceCodester Pet Grooming Management Software ajax_product.php sql injectionSourceCodester Pet Grooming Management Software
- CVE-2025-10428SourceCodester Pet Grooming Management Software Setting seo_setting.php unrestricted uploadSourceCodester Pet Grooming Management Software
- CVE-2025-10427SourceCodester Pet Grooming Management Software user.php unrestricted uploadSourceCodester Pet Grooming Management Software
- CVE-2025-10426itsourcecode Online Laundry Management System login.php sql injectionitsourcecode Online Laundry Management System
- CVE-2025-104251000projects Online Student Project Report Submission and Evaluation System student_controller.php unrestricted upload1000projects Online Student Project Report Submission and E…
- CVE-2025-104241000projects Online Student Project Report Submission and Evaluation System faculty_controller.php unrestricted upload1000projects Online Student Project Report Submission and E…
- CVE-2025-10423newbee-mall kaptcha mallKaptcha Captchanewbee-mall
- CVE-2025-10422newbee-mall Order Status paySuccess improper authorizationnewbee-mall
- CVE-2025-10421SourceCodester Student Grading System update_account.php sql injectionSourceCodester Student Grading System
- CVE-2025-10420SourceCodester Student Grading System form137.php sql injectionSourceCodester Student Grading System
- CVE-2025-10419SourceCodester Student Grading System del_promote.php sql injectionSourceCodester Student Grading System
- CVE-2025-10418SourceCodester Student Grading System view_students.php sql injectionSourceCodester Student Grading System
- CVE-2025-10417Campcodes Grocery Sales and Inventory System ajax.php sql injectionCampcodes Grocery Sales and Inventory System
- CVE-2025-45091Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting (XSS) attack.
- CVE-2025-49089wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd.moneyprinterturbo
- CVE-2025-52048In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function add_tag() at `frappe/desk/doctype/tag/tag.py` is vulnerable to S
- CVE-2025-52344Multiple Cross Site Scripting (XSS) vulnerabilities in input fields in Explorance Blue 8.1.2 allows attackers to inject arbitrary JavaScript
- CVE-2025-56252Cross Site Scripting (xss) vulnerability in ServitiumCRM 2.10 allowing attackers to execute arbitrary code via a crafted URL to the mobile p
- CVE-2025-56448The Positron PX360BT SW REV 8 car alarm system is vulnerable to a replay attack due to a failure in implementing rolling code security.
- CVE-2025-57104Teampel 5.1.6 is vulnerable to SQL Injection in /Common/login.aspx.
- CVE-2025-57117A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.
- CVE-2025-57176On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antennas before 2026-03-10, the rfpiped service on TCP poCeragon Networks / Siklu Communication EtherHaul and MultiH…
- CVE-2025-59376feiskyer mcp-kubernetes-server through 0.1.11 does not consider chained commands in the implementation of --disable-write and --disable-delefeiskyer mcp-kubernetes-server · mcp-kubernetes-server
- CVE-2025-59377feiskyer mcp-kubernetes-server through 0.1.11 allows OS command injection, even in read-only mode, via /mcp/kubectl because shell=True is usfeiskyer mcp-kubernetes-server · mcp-kubernetes-server
- CVE-2025-59378In guix-daemon in GNU Guix before 1618ca7, a content-addressed-mirrors file can be written to create a setuid program that allows a regular GNU Guix
- CVE-2025-59397Open Web Analytics (OWA) before 1.8.1 allows owa_db.php v[value] SQL injection.openwebanalytics Open Web Analytics · open-web-analytics/op…
- CVE-2025-59398The OCPP implementation in libocpp before 0.26.2 allows a denial of service (EVerest crash) via JSON input larger than 255 characters, becauEVerest libocpp
- CVE-2025-59399libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.EVerest libocpp