# CVEs published 2025-10-01

243 CVEs were published on October 1, 2025: 5 critical, 78 high. Days are UTC.

- [CVE-2025-61588](https://cve.now/CVE-2025-61588.md): risc0 vulnerable to arbitrary code execution in guest via memory safety failure in \`sys\_read\` (CVSS 9.3, risc0 · risc0-zkvm-platform +3)
- [CVE-2025-61583](https://cve.now/CVE-2025-61583.md): TS3 Manager is vulnerable to unauthenticated reflected XSS attack due to insecure error handling (CVSS 4.3, joni1802 ts3-manager)
- [CVE-2025-61582](https://cve.now/CVE-2025-61582.md): Ts3 Manager: Unauthenticated Denial of Service possible through specially crafted Unicode input (CVSS 7.5, joni1802 ts3-manager)
- [CVE-2025-61587](https://cve.now/CVE-2025-61587.md): Weblate integration with Anubis can lead to Open Redirect via redir parameter (CVSS 2.1, WeblateOrg weblate · weblate)
- [CVE-2025-59951](https://cve.now/CVE-2025-59951.md): Termix' official Docker image contains an authentication bypass vulnerability (CVSS 9.2, LukeGus Termix)
- [CVE-2025-54811](https://cve.now/CVE-2025-54811.md): OpenPLC\_V3 (CVSS 7.1, OpenPLC\_V3)
- [CVE-2025-23297](https://cve.now/CVE-2025-23297.md): NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unpri (CVSS 7.8, NVIDIA App)
- [CVE-2025-23355](https://cve.now/CVE-2025-23355.md): NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. (CVSS 6.7, NVIDIA Nsight Graphics)
- [CVE-2025-59538](https://cve.now/CVE-2025-59538.md): Argo CD is Vulnerable to Unauthenticated Remote DoS via malformed Azure DevOps git.push webhook (CVSS 7.5, argoproj argo-cd · github.com/argoproj/argo-cd +2)
- [CVE-2025-59537](https://cve.now/CVE-2025-59537.md): argo-cd is vulnerable to unauthenticated DoS attack via malformed Gogs webhook payload (CVSS 7.5, argoproj argo-cd · github.com/argoproj/argo-cd +2)
- [CVE-2025-59531](https://cve.now/CVE-2025-59531.md): Unauthenticated argocd-server panic via a malicious Bitbucket-Server webhook payload (CVSS 7.5, argoproj argo-cd · github.com/argoproj/argo-cd +2)
- [CVE-2025-59337](https://cve.now/CVE-2025-59337.md): Discourse: Cross-Site Data Exposure via Backup Restore Metacommand Injection in Multisite Deployments (CVSS 5.5, discourse)
- [CVE-2025-59150](https://cve.now/CVE-2025-59150.md): Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref (CVSS 7.5, OISF suricata)
- [CVE-2025-59149](https://cve.now/CVE-2025-59149.md): Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms (CVSS 6.2, OISF suricata)
- [CVE-2025-58769](https://cve.now/CVE-2025-58769.md): auth0-PHP: Improper File Type Handling in Bulk User Import (CVSS 3.3, laravel-auth0 · auth0/auth0-php)
- [CVE-2025-59148](https://cve.now/CVE-2025-59148.md): Suricata's improper use of entropy keyword can lead to a NULL-ptr deref (CVSS 7.5, OISF suricata)
- [CVE-2025-59147](https://cve.now/CVE-2025-59147.md): Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets (CVSS 7.5, OISF suricata)
- [CVE-2025-58055](https://cve.now/CVE-2025-58055.md): Discourse AI Suggestions Contain Insecure Direct Object Reference (CVSS 4.3, discourse)
- [CVE-2025-10578](https://cve.now/CVE-2025-10578.md): HP Support Assistant - Potential Escalation of Privilege (CVSS 5.8, HP Support Assistant)
- [CVE-2025-58054](https://cve.now/CVE-2025-58054.md): Discourse is vulnerable to XSS when quoting chat messages (CVSS 3.5, discourse)
- [CVE-2025-8679](https://cve.now/CVE-2025-8679.md): ExtremeGuest Essentials Captive Portal Unauthenticated Brute Force (CVSS 7.6, Extreme Networks ExtremeGuest Essentials)
- [CVE-2023-49883](https://cve.now/CVE-2023-49883.md): IBM Transformation Extender Advanced information disclosure (CVSS 5.9, IBM Transformation Extender Advanced)
- [CVE-2023-50300](https://cve.now/CVE-2023-50300.md): IBM Transformation Extender Advanced improper access control (CVSS 5.1, IBM Transformation Extender Advanced)
- [CVE-2023-49881](https://cve.now/CVE-2023-49881.md): IBM Transformation Extender Advanced session fixation (CVSS 6.3, IBM Transformation Extender Advanced)
- [CVE-2025-34182](https://cve.now/CVE-2025-34182.md): Deciso OPNsense \< 25.7.4 /interfaces\_ppps\_edit.php ptpid Stored XSS (CVSS 5.1, Deciso OPNsense)
- [CVE-2025-11233](https://cve.now/CVE-2025-11233.md): Rust standard library didn't detect all path separators on Cygwin (CVSS 6.3, Rust Project std)
- [CVE-2025-20357](https://cve.now/CVE-2025-20357.md): Cisco CyberVision Center Reports Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Cyber Vision)
- [CVE-2025-20356](https://cve.now/CVE-2025-20356.md): Cisco CyberVision Center Sensor Explorer Stored Cross-Site Scripting Vulnerability (CVSS 5.4, Cisco Cyber Vision)
- [CVE-2025-20361](https://cve.now/CVE-2025-20361.md): Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Unified Communications Manager)
- [CVE-2025-20368](https://cve.now/CVE-2025-20368.md): Stored Cross-Site Scripting (XSS) through missing field warning messages in Saved Search and Job Inspector on Splunk Enterprise (CVSS 5.7, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-20371](https://cve.now/CVE-2025-20371.md): Unauthenticated Blind Server Side Request Forgery (SSRF) in Splunk Enterprise (CVSS 7.5, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-20367](https://cve.now/CVE-2025-20367.md): Reflected Cross-site Scripting (XSS) in '/app/search/table' endpoint through the 'dataset.command' parameter on Splunk Enterprise (CVSS 5.7, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-20370](https://cve.now/CVE-2025-20370.md): Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise (CVSS 4.9, Splunk Enterprise)
- [CVE-2025-20366](https://cve.now/CVE-2025-20366.md): Improper Access Control in Background Job Submission in Splunk Enterprise (CVSS 6.5, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2025-20369](https://cve.now/CVE-2025-20369.md): Extensible Markup Language (XML) External Entity Injection (XXE) through Dashboard label field on Splunk Enterprise (CVSS 4.6, Splunk Enterprise · Splunk Cloud Platform)
- [CVE-2023-50301](https://cve.now/CVE-2023-50301.md): IBM Transformation Extender Advanced information disclosure (CVSS 1.9, IBM Transformation Extender Advanced)
- [CVE-2025-41421](https://cve.now/CVE-2025-41421.md): Privilege Escalation via Symbolic Link Spoofing in TeamViewer Client (CVSS 4.7, TeamViewer Full Client · TeamViewer Host)
- [CVE-2025-40648](https://cve.now/CVE-2025-40648.md): Stored Cross-Site Scripting (XSS) vulnerability in Issabel products (CVSS 4.8, issabel-pbx module Issabel · Issabel, issabel-agenda module…)
- [CVE-2025-40647](https://cve.now/CVE-2025-40647.md): Stored Cross-Site Scripting (XSS) vulnerability in Issabel products (CVSS 5.1, issabel-pbx module Issabel · Issabel, issabel-agenda module…)
- [CVE-2023-53532](https://cve.now/CVE-2023-53532.md): wifi: ath11k: fix deinitialization of firmware resources (no CVSS, Linux)
- [CVE-2023-53531](https://cve.now/CVE-2023-53531.md): null\_blk: fix poll request timeout handling (CVSS 7.8, Linux)
- [CVE-2023-53530](https://cve.now/CVE-2023-53530.md): scsi: qla2xxx: Use raw\_smp\_processor\_id() instead of smp\_processor\_id() (no CVSS, Linux)
- [CVE-2023-53529](https://cve.now/CVE-2023-53529.md): wifi: rtw88: Fix memory leak in rtw88\_usb (no CVSS, Linux)
- [CVE-2023-53528](https://cve.now/CVE-2023-53528.md): RDMA/rxe: Fix unsafe drain work queue code (no CVSS, Linux)
- [CVE-2023-53527](https://cve.now/CVE-2023-53527.md): thunderbolt: Fix memory leak in tb\_handle\_dp\_bandwidth\_request() (no CVSS, Linux)
- [CVE-2023-53526](https://cve.now/CVE-2023-53526.md): jbd2: check 'jh-\>b\_transaction' before removing it from checkpoint (CVSS 7.8, Linux)
- [CVE-2023-53525](https://cve.now/CVE-2023-53525.md): RDMA/cma: Allow UD qp\_type to join multicast only (no CVSS, Linux)
- [CVE-2023-53524](https://cve.now/CVE-2023-53524.md): wifi: iwlwifi: pcie: Fix integer overflow in iwl\_write\_to\_user\_buf (no CVSS, Linux)
- [CVE-2023-53523](https://cve.now/CVE-2023-53523.md): can: gs\_usb: fix time stamp counter initialization (no CVSS, Linux)
- [CVE-2023-53522](https://cve.now/CVE-2023-53522.md): cgroup,freezer: hold cpu\_hotplug\_lock before freezer\_mutex (no CVSS, Linux)
- [CVE-2023-53521](https://cve.now/CVE-2023-53521.md): scsi: ses: Fix slab-out-of-bounds in ses\_intf\_remove() (no CVSS, Linux)
- [CVE-2023-53520](https://cve.now/CVE-2023-53520.md): Bluetooth: Fix hci\_suspend\_sync crash (CVSS 7.8, Linux)
- [CVE-2023-53519](https://cve.now/CVE-2023-53519.md): media: v4l2-mem2mem: add lock to protect parameter num\_rdy (no CVSS, Linux)
- [CVE-2023-53518](https://cve.now/CVE-2023-53518.md): PM / devfreq: Fix leak in devfreq\_dev\_release() (CVSS 7.8, Linux)
- [CVE-2023-53517](https://cve.now/CVE-2023-53517.md): tipc: do not update mtu if msg\_max is too small in mtu negotiation (CVSS 9.8, Linux)
- [CVE-2023-53516](https://cve.now/CVE-2023-53516.md): macvlan: add forgotten nla\_policy for IFLA\_MACVLAN\_BC\_CUTOFF (no CVSS, Linux)
- [CVE-2023-53515](https://cve.now/CVE-2023-53515.md): virtio-mmio: don't break lifecycle of vm\_dev (no CVSS, Linux)
- [CVE-2023-53514](https://cve.now/CVE-2023-53514.md): gpu: host1x: Fix memory leak of device names (no CVSS, Linux)
- [CVE-2023-53513](https://cve.now/CVE-2023-53513.md): nbd: fix incomplete validation of ioctl arg (no CVSS, Linux)
- [CVE-2023-53512](https://cve.now/CVE-2023-53512.md): scsi: mpt3sas: Fix a memory leak (no CVSS, Linux)
- [CVE-2023-53511](https://cve.now/CVE-2023-53511.md): io\_uring: fix fget leak when fs don't support nowait buffered read (no CVSS, Linux)
- [CVE-2023-53510](https://cve.now/CVE-2023-53510.md): scsi: ufs: core: Fix handling of lrbp-\>cmd (CVSS 7.8, Linux)
- [CVE-2023-53509](https://cve.now/CVE-2023-53509.md): qed: allow sleep in qed\_mcp\_trace\_dump() (no CVSS, Linux)
- [CVE-2023-53508](https://cve.now/CVE-2023-53508.md): ublk: fail to start device if queue setup is interrupted (no CVSS, Linux)
- [CVE-2023-53507](https://cve.now/CVE-2023-53507.md): net/mlx5: Unregister devlink params in case interface is down (no CVSS, Linux)
- [CVE-2023-53506](https://cve.now/CVE-2023-53506.md): udf: Do not bother merging very long extents (CVSS 7.8, Linux)
- [CVE-2023-53505](https://cve.now/CVE-2023-53505.md): clk: tegra: tegra124-emc: Fix potential memory leak (no CVSS, Linux)
- [CVE-2023-53504](https://cve.now/CVE-2023-53504.md): RDMA/bnxt\_re: Properly order ib\_device\_unalloc() to avoid UAF (CVSS 7.8, Linux)
- [CVE-2023-53503](https://cve.now/CVE-2023-53503.md): ext4: allow ext4\_get\_group\_info() to fail (no CVSS, Linux)
- [CVE-2023-53501](https://cve.now/CVE-2023-53501.md): iommu/amd/iommu\_v2: Fix pasid\_state refcount dec hit 0 warning on pasid unbind (no CVSS, Linux)
- [CVE-2023-53500](https://cve.now/CVE-2023-53500.md): xfrm: fix slab-use-after-free in decode\_session6 (CVSS 7.3, Linux)
- [CVE-2023-53499](https://cve.now/CVE-2023-53499.md): virtio\_net: Fix error unwinding of XDP initialization (CVSS 7.0, Linux)
- [CVE-2023-53498](https://cve.now/CVE-2023-53498.md): drm/amd/display: Fix potential null dereference (no CVSS, Linux)
- [CVE-2023-53497](https://cve.now/CVE-2023-53497.md): media: vsp1: Replace vb2\_is\_streaming() with vb2\_start\_streaming\_called() (no CVSS, Linux)
- [CVE-2023-53496](https://cve.now/CVE-2023-53496.md): x86/platform/uv: Use alternate source for socket to node data (no CVSS, Linux)
- [CVE-2023-53495](https://cve.now/CVE-2023-53495.md): net: ethernet: mvpp2\_main: fix possible OOB write in mvpp2\_ethtool\_get\_rxnfc() (CVSS 7.8, Linux)
- [CVE-2023-53494](https://cve.now/CVE-2023-53494.md): crypto: xts - Handle EBUSY correctly (CVSS 7.8, Linux)
- [CVE-2023-53493](https://cve.now/CVE-2023-53493.md): accel/qaic: tighten bounds checking in decode\_message() (CVSS 8.4, Linux)
- [CVE-2023-53492](https://cve.now/CVE-2023-53492.md): netfilter: nf\_tables: do not ignore genmask when looking up chain by id (CVSS 7.8, Linux)
- [CVE-2023-53491](https://cve.now/CVE-2023-53491.md): start\_kernel: Add \_\_no\_stack\_protector function attribute (CVSS 7.5, Linux)
- [CVE-2023-53490](https://cve.now/CVE-2023-53490.md): mptcp: fix disconnect vs accept race (CVSS 7.8, Linux)
- [CVE-2023-53489](https://cve.now/CVE-2023-53489.md): tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (no CVSS, Linux)
- [CVE-2023-53488](https://cve.now/CVE-2023-53488.md): IB/hfi1: Fix possible panic during hotplug remove (no CVSS, Linux)
- [CVE-2022-50469](https://cve.now/CVE-2022-50469.md): staging: rtl8723bs: fix potential memory leak in rtw\_init\_drv\_sw() (no CVSS, Linux)
- [CVE-2022-50468](https://cve.now/CVE-2022-50468.md): platform/chrome: cros\_usbpd\_notify: Fix error handling in cros\_usbpd\_notify\_init() (no CVSS, Linux)
- [CVE-2022-50467](https://cve.now/CVE-2022-50467.md): scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT\_ID (no CVSS, Linux)
- [CVE-2022-50466](https://cve.now/CVE-2022-50466.md): fs/binfmt\_elf: Fix memory leak in load\_elf\_binary() (no CVSS, Linux)
- [CVE-2022-50465](https://cve.now/CVE-2022-50465.md): ext4: fix leaking uninitialized memory in fast-commit journal (no CVSS, Linux)
- [CVE-2022-50464](https://cve.now/CVE-2022-50464.md): mt76: mt7915: Fix PCI device refcount leak in mt7915\_pci\_init\_hif2() (no CVSS, Linux)
- [CVE-2022-50463](https://cve.now/CVE-2022-50463.md): powerpc/52xx: Fix a resource leak in an error handling path (no CVSS, Linux)
- [CVE-2022-50462](https://cve.now/CVE-2022-50462.md): MIPS: vpe-mt: fix possible memory leak while module exiting (no CVSS, Linux)
- [CVE-2022-50461](https://cve.now/CVE-2022-50461.md): net: ethernet: ti: am65-cpsw: Fix PM runtime leakage in am65\_cpsw\_nuss\_ndo\_slave\_open() (no CVSS, Linux)
- [CVE-2022-50460](https://cve.now/CVE-2022-50460.md): cifs: Fix xid leak in cifs\_flock() (no CVSS, Linux)
- [CVE-2022-50459](https://cve.now/CVE-2022-50459.md): scsi: iscsi: iscsi\_tcp: Fix null-ptr-deref while calling getpeername() (CVSS 7.8, Linux)
- [CVE-2022-50458](https://cve.now/CVE-2022-50458.md): clk: tegra: Fix refcount leak in tegra210\_clock\_init (no CVSS, Linux)
- [CVE-2022-50457](https://cve.now/CVE-2022-50457.md): mtd: core: Fix refcount error in del\_mtd\_device() (no CVSS, Linux)
- [CVE-2022-50456](https://cve.now/CVE-2022-50456.md): btrfs: fix resolving backrefs for inline extent followed by prealloc (no CVSS, Linux)
- [CVE-2022-50454](https://cve.now/CVE-2022-50454.md): drm/nouveau: fix a use-after-free in nouveau\_gem\_prime\_import\_sg\_table() (CVSS 7.8, Linux)
- [CVE-2022-50453](https://cve.now/CVE-2022-50453.md): gpiolib: cdev: fix NULL-pointer dereferences (no CVSS, Linux)
- [CVE-2022-50452](https://cve.now/CVE-2022-50452.md): net: sched: cake: fix null pointer access issue when cake\_init() fails (no CVSS, Linux)
- [CVE-2022-50451](https://cve.now/CVE-2022-50451.md): fs/ntfs3: Fix memory leak on ntfs\_fill\_super() error path (no CVSS, Linux)
- [CVE-2022-50449](https://cve.now/CVE-2022-50449.md): clk: samsung: Fix memory leak in \_samsung\_clk\_register\_pll() (no CVSS, Linux)
- [CVE-2022-50448](https://cve.now/CVE-2022-50448.md): mm/uffd: fix warning without PTE\_MARKER\_UFFD\_WP compiled in (no CVSS, Linux)
- [CVE-2022-50447](https://cve.now/CVE-2022-50447.md): Bluetooth: hci\_conn: Fix crash on hci\_create\_cis\_sync (no CVSS, Linux)
- [CVE-2022-50446](https://cve.now/CVE-2022-50446.md): ARC: mm: fix leakage of memory allocated for PTE (no CVSS, Linux)
- [CVE-2022-50445](https://cve.now/CVE-2022-50445.md): xfrm: Reinject transport-mode packets through workqueue (no CVSS, Linux)
- [CVE-2021-4460](https://cve.now/CVE-2021-4460.md): drm/amdkfd: Fix UBSAN shift-out-of-bounds warning (CVSS 7.1, Linux)
- [CVE-2023-53487](https://cve.now/CVE-2023-53487.md): powerpc/rtas\_flash: allow user copy to flash block cache objects (no CVSS, Linux)
- [CVE-2023-53486](https://cve.now/CVE-2023-53486.md): fs/ntfs3: Enhance the attribute size check (CVSS 7.8, Linux)
- [CVE-2023-53485](https://cve.now/CVE-2023-53485.md): fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (CVSS 7.8, Linux)
- [CVE-2023-53484](https://cve.now/CVE-2023-53484.md): lib: cpu\_rmap: Avoid use after free on rmap-\>obj array entries (CVSS 7.8, Linux)
- [CVE-2023-53483](https://cve.now/CVE-2023-53483.md): ACPI: processor: Check for null return of devm\_kzalloc() in fch\_misc\_setup() (no CVSS, Linux)
- [CVE-2023-53482](https://cve.now/CVE-2023-53482.md): iommu: Fix error unwind in iommu\_group\_alloc() (no CVSS, Linux)
- [CVE-2023-53481](https://cve.now/CVE-2023-53481.md): ubi: ubi\_wl\_put\_peb: Fix infinite loop when wear-leveling work failed (CVSS 7.8, Linux)
- [CVE-2023-53480](https://cve.now/CVE-2023-53480.md): kobject: Add sanity check for kset-\>kobj.ktype in kset\_register() (no CVSS, Linux)
- [CVE-2023-53479](https://cve.now/CVE-2023-53479.md): cxl/acpi: Fix a use-after-free in cxl\_parse\_cfmws() (no CVSS, Linux)
- [CVE-2023-53478](https://cve.now/CVE-2023-53478.md): tracing/synthetic: Fix races on freeing last\_cmd (CVSS 7.8, Linux)
- [CVE-2023-53477](https://cve.now/CVE-2023-53477.md): ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (no CVSS, Linux)
- [CVE-2023-53476](https://cve.now/CVE-2023-53476.md): iw\_cxgb4: Fix potential NULL dereference in c4iw\_fill\_res\_cm\_id\_entry() (no CVSS, Linux)
- [CVE-2023-53475](https://cve.now/CVE-2023-53475.md): usb: xhci: tegra: fix sleep in atomic call (no CVSS, Linux)
- [CVE-2023-53474](https://cve.now/CVE-2023-53474.md): x86/MCE/AMD: Use an u64 for bank\_map (CVSS 7.8, Linux)
- [CVE-2023-53473](https://cve.now/CVE-2023-53473.md): ext4: improve error handling from ext4\_dirhash() (CVSS 7.8, Linux)
- [CVE-2023-53472](https://cve.now/CVE-2023-53472.md): pwm: lpc32xx: Remove handling of PWM channels (no CVSS, Linux)
- [CVE-2023-53471](https://cve.now/CVE-2023-53471.md): drm/amdgpu/gfx: disable gfx9 cp\_ecc\_error\_irq only when enabling legacy gfx ras (no CVSS, Linux)
- [CVE-2023-53470](https://cve.now/CVE-2023-53470.md): ionic: catch failure from devlink\_alloc (no CVSS, Linux)
- [CVE-2023-53468](https://cve.now/CVE-2023-53468.md): ubifs: Fix memory leak in alloc\_wbufs() (no CVSS, Linux)
- [CVE-2023-53467](https://cve.now/CVE-2023-53467.md): wifi: rtw89: fix potential leak in rtw89\_append\_probe\_req\_ie() (no CVSS, Linux)
- [CVE-2023-53466](https://cve.now/CVE-2023-53466.md): wifi: mt76: mt7915: fix memory leak in mt7915\_mcu\_exit (no CVSS, Linux)
- [CVE-2023-53465](https://cve.now/CVE-2023-53465.md): soundwire: qcom: fix storing port config out-of-bounds (CVSS 7.8, Linux)
- [CVE-2023-53464](https://cve.now/CVE-2023-53464.md): scsi: iscsi\_tcp: Check that sock is valid before iscsi\_set\_param() (no CVSS, Linux)
- [CVE-2023-53463](https://cve.now/CVE-2023-53463.md): ibmvnic: Do not reset dql stats on NON\_FATAL err (CVSS 7.5, Linux)
- [CVE-2023-53462](https://cve.now/CVE-2023-53462.md): hsr: Fix uninit-value access in fill\_frame\_info() (CVSS 7.1, Linux)
- [CVE-2023-53461](https://cve.now/CVE-2023-53461.md): io\_uring: wait interruptibly for request completions on exit (no CVSS, Linux)
- [CVE-2023-53460](https://cve.now/CVE-2023-53460.md): wifi: rtw88: fix memory leak in rtw\_usb\_probe() (no CVSS, Linux)
- [CVE-2023-53459](https://cve.now/CVE-2023-53459.md): HID: mcp-2221: prevent UAF in delayed work (no CVSS, Linux)
- [CVE-2023-53458](https://cve.now/CVE-2023-53458.md): media: cx23885: Fix a null-ptr-deref bug in buffer\_prepare() and buffer\_finish() (no CVSS, Linux)
- [CVE-2023-53457](https://cve.now/CVE-2023-53457.md): FS: JFS: Fix null-ptr-deref Read in txBegin (no CVSS, Linux)
- [CVE-2023-53456](https://cve.now/CVE-2023-53456.md): scsi: qla4xxx: Add length check when parsing nlattrs (no CVSS, Linux)
- [CVE-2023-53455](https://cve.now/CVE-2023-53455.md): drm/vc4: drop all currently held locks if deadlock happens (no CVSS, Linux)
- [CVE-2023-53454](https://cve.now/CVE-2023-53454.md): HID: multitouch: Correct devm device reference for hidinput input\_dev name (CVSS 8.8, Linux)
- [CVE-2023-53453](https://cve.now/CVE-2023-53453.md): drm/radeon: free iio for atombios when driver shutdown (no CVSS, Linux)
- [CVE-2023-53452](https://cve.now/CVE-2023-53452.md): wifi: rtw89: fix potential race condition between napi\_init and napi\_enable (no CVSS, Linux)
- [CVE-2023-53451](https://cve.now/CVE-2023-53451.md): scsi: qla2xxx: Fix potential NULL pointer dereference (no CVSS, Linux)
- [CVE-2023-53450](https://cve.now/CVE-2023-53450.md): ext4: remove a BUG\_ON in ext4\_mb\_release\_group\_pa() (no CVSS, Linux)
- [CVE-2023-53449](https://cve.now/CVE-2023-53449.md): s390/dasd: Fix potential memleak in dasd\_eckd\_init() (no CVSS, Linux)
- [CVE-2023-53448](https://cve.now/CVE-2023-53448.md): fbdev: imxfb: Removed unneeded release\_mem\_region (no CVSS, Linux)
- [CVE-2022-50444](https://cve.now/CVE-2022-50444.md): clk: tegra20: Fix refcount leak in tegra20\_clock\_init (no CVSS, Linux)
- [CVE-2022-50443](https://cve.now/CVE-2022-50443.md): drm/rockchip: lvds: fix PM usage counter unbalance in poweron (no CVSS, Linux)
- [CVE-2022-50442](https://cve.now/CVE-2022-50442.md): fs/ntfs3: Validate buffer length while parsing index (CVSS 8.4, Linux)
- [CVE-2022-50441](https://cve.now/CVE-2022-50441.md): net/mlx5: Lag, fix failure to cancel delayed bond work (no CVSS, Linux)
- [CVE-2022-50440](https://cve.now/CVE-2022-50440.md): drm/vmwgfx: Validate the box size for the snooped cursor (CVSS 7.8, Linux)
- [CVE-2022-50439](https://cve.now/CVE-2022-50439.md): ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (no CVSS, Linux)
- [CVE-2022-50438](https://cve.now/CVE-2022-50438.md): net: hinic: fix memory leak when reading function table (no CVSS, Linux)
- [CVE-2022-50437](https://cve.now/CVE-2022-50437.md): drm/msm/hdmi: fix memory corruption with too many bridges (CVSS 7.8, Linux)
- [CVE-2022-50436](https://cve.now/CVE-2022-50436.md): ext4: don't set up encryption key during jbd2 transaction (no CVSS, Linux)
- [CVE-2022-50435](https://cve.now/CVE-2022-50435.md): ext4: avoid crash when inline data creation follows DIO write (no CVSS, Linux)
- [CVE-2022-50434](https://cve.now/CVE-2022-50434.md): blk-mq: fix possible memleak when register 'hctx' failed (no CVSS, Linux)
- [CVE-2022-50433](https://cve.now/CVE-2022-50433.md): efi: ssdt: Don't free memory if ACPI table was loaded successfully (no CVSS, Linux)
- [CVE-2022-50432](https://cve.now/CVE-2022-50432.md): kernfs: fix use-after-free in \_\_kernfs\_remove (CVSS 7.8, Linux)
- [CVE-2022-50431](https://cve.now/CVE-2022-50431.md): ALSA: aoa: i2sbus: fix possible memory leak in i2sbus\_add\_dev() (no CVSS, Linux)
- [CVE-2022-50430](https://cve.now/CVE-2022-50430.md): mmc: vub300: fix warning - do not call blocking ops when !TASK\_RUNNING (no CVSS, Linux)
- [CVE-2022-50429](https://cve.now/CVE-2022-50429.md): memory: of: Fix refcount leak bug in of\_lpddr3\_get\_ddr\_timings() (no CVSS, Linux)
- [CVE-2022-50428](https://cve.now/CVE-2022-50428.md): ext4: fix off-by-one errors in fast-commit block filling (no CVSS, Linux)
- [CVE-2022-50427](https://cve.now/CVE-2022-50427.md): ALSA: ac97: fix possible memory leak in snd\_ac97\_dev\_register() (no CVSS, Linux)
- [CVE-2022-50426](https://cve.now/CVE-2022-50426.md): remoteproc: imx\_dsp\_rproc: Add mutex protection for workqueue (no CVSS, Linux)
- [CVE-2022-50425](https://cve.now/CVE-2022-50425.md): x86/fpu: Fix copy\_xstate\_to\_uabi() to copy init states correctly (no CVSS, Linux)
- [CVE-2022-50424](https://cve.now/CVE-2022-50424.md): wifi: mt76: mt7921: resource leaks at mt7921\_check\_offload\_capability() (CVSS 5.5, Linux)
- [CVE-2022-50423](https://cve.now/CVE-2022-50423.md): ACPICA: Fix use-after-free in acpi\_ut\_copy\_ipackage\_to\_ipackage() (CVSS 7.8, Linux)
- [CVE-2022-50422](https://cve.now/CVE-2022-50422.md): scsi: libsas: Fix use-after-free bug in smp\_execute\_task\_sg() (CVSS 7.8, Linux)
- [CVE-2022-50421](https://cve.now/CVE-2022-50421.md): rpmsg: char: Avoid double destroy of default endpoint (CVSS 7.8, Linux)
- [CVE-2022-50420](https://cve.now/CVE-2022-50420.md): crypto: hisilicon/hpre - fix resource leak in remove process (CVSS 5.5, Linux)
- [CVE-2025-10847](https://cve.now/CVE-2025-10847.md): DX UIM Probe Improper ACL Handling RCE (CVSS 8.4, Broadcom Unified Infrastructure Management)
- [CVE-2025-61622](https://cve.now/CVE-2025-61622.md): Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory (CVSS 9.8, Apache Software Foundation Apache Fory · pyfury +1)
- [CVE-2025-39928](https://cve.now/CVE-2025-39928.md): i2c: rtl9300: ensure data length is within supported range (CVSS 7.1, Linux)
- [CVE-2025-39927](https://cve.now/CVE-2025-39927.md): ceph: fix race condition validating r\_parent before applying state (CVSS 7.8, Linux)
- [CVE-2025-39926](https://cve.now/CVE-2025-39926.md): genetlink: fix genl\_bind() invoking bind() after -EPERM (CVSS 5.5, Linux)
- [CVE-2025-39925](https://cve.now/CVE-2025-39925.md): can: j1939: implement NETDEV\_UNREGISTER notification handler (CVSS 5.5, Linux)
- [CVE-2025-39924](https://cve.now/CVE-2025-39924.md): erofs: fix invalid algorithm for encoded extents (CVSS 7.8, Linux)
- [CVE-2025-39923](https://cve.now/CVE-2025-39923.md): dmaengine: qcom: bam\_dma: Fix DT error handling for num-channels/ees (no CVSS, Linux)
- [CVE-2025-39922](https://cve.now/CVE-2025-39922.md): ixgbe: fix incorrect map used in eee linkmode (CVSS 7.1, Linux)
- [CVE-2025-39921](https://cve.now/CVE-2025-39921.md): spi: microchip-core-qspi: stop checking viability of op-\>max\_freq in supports\_op callback (CVSS 5.5, Linux)
- [CVE-2025-39920](https://cve.now/CVE-2025-39920.md): pcmcia: Add error handling for add\_interval() in do\_validate\_mem() (no CVSS, Linux)
- [CVE-2025-39919](https://cve.now/CVE-2025-39919.md): wifi: mt76: mt7996: add missing check for rx wcid entries (CVSS 8.8, Linux)
- [CVE-2025-39918](https://cve.now/CVE-2025-39918.md): wifi: mt76: fix linked list corruption (CVSS 8.8, Linux)
- [CVE-2025-39917](https://cve.now/CVE-2025-39917.md): bpf: Fix out-of-bounds dynptr write in bpf\_crypto\_crypt (CVSS 7.8, Linux)
- [CVE-2025-39916](https://cve.now/CVE-2025-39916.md): mm/damon/reclaim: avoid divide-by-zero in damon\_reclaim\_apply\_parameters() (no CVSS, Linux)
- [CVE-2025-39915](https://cve.now/CVE-2025-39915.md): net: phy: transfer phy\_config\_inband() locking responsibility to phylink (CVSS 5.5, Linux)
- [CVE-2025-39914](https://cve.now/CVE-2025-39914.md): tracing: Silence warning when chunk allocation fails in trace\_pid\_write (no CVSS, Linux)
- [CVE-2025-39913](https://cve.now/CVE-2025-39913.md): tcp\_bpf: Call sk\_msg\_free() when tcp\_bpf\_send\_verdict() fails to allocate psock-\>cork. (no CVSS, Linux)
- [CVE-2025-39912](https://cve.now/CVE-2025-39912.md): nfs/localio: restore creds before releasing pageio data (CVSS 5.5, Linux)
- [CVE-2025-39911](https://cve.now/CVE-2025-39911.md): i40e: fix IRQ freeing in i40e\_vsi\_request\_irq\_msix error path (no CVSS, Linux)
- [CVE-2025-39910](https://cve.now/CVE-2025-39910.md): mm/vmalloc, mm/kasan: respect gfp mask in kasan\_populate\_vmalloc() (CVSS 5.5, Linux)
- [CVE-2025-39909](https://cve.now/CVE-2025-39909.md): mm/damon/lru\_sort: avoid divide-by-zero in damon\_lru\_sort\_apply\_parameters() (no CVSS, Linux)
- [CVE-2025-39908](https://cve.now/CVE-2025-39908.md): net: dev\_ioctl: take ops lock in hwtstamp lower paths (CVSS 7.8, Linux)
- [CVE-2025-39907](https://cve.now/CVE-2025-39907.md): mtd: rawnand: stm32\_fmc2: avoid overlapping mappings on ECC buffer (no CVSS, Linux)
- [CVE-2025-39906](https://cve.now/CVE-2025-39906.md): drm/amd/display: remove oem i2c adapter on finish (CVSS 7.8, Linux)
- [CVE-2025-39905](https://cve.now/CVE-2025-39905.md): net: phylink: add lock for serializing concurrent pl-\>phydev writes with resolver (CVSS 7.0, Linux)
- [CVE-2025-39904](https://cve.now/CVE-2025-39904.md): arm64: kexec: initialize kexec\_buf struct in load\_other\_segments() (CVSS 5.5, Linux)
- [CVE-2025-39903](https://cve.now/CVE-2025-39903.md): of\_numa: fix uninitialized memory nodes causing kernel panic (CVSS 5.5, Linux)
- [CVE-2025-39902](https://cve.now/CVE-2025-39902.md): mm/slub: avoid accessing metadata when pointer is invalid in object\_err() (CVSS 7.1, Linux)
- [CVE-2025-39901](https://cve.now/CVE-2025-39901.md): i40e: remove read access to debugfs files (CVSS 7.1, Linux)
- [CVE-2025-39900](https://cve.now/CVE-2025-39900.md): net\_sched: gen\_estimator: fix est\_timer() vs CONFIG\_PREEMPT\_RT=y (CVSS 5.5, Linux)
- [CVE-2025-39899](https://cve.now/CVE-2025-39899.md): mm/userfaultfd: fix kmap\_local LIFO ordering for CONFIG\_HIGHPTE (CVSS 5.5, Linux)
- [CVE-2025-39897](https://cve.now/CVE-2025-39897.md): net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (CVSS 7.5, Linux)
- [CVE-2025-39896](https://cve.now/CVE-2025-39896.md): accel/ivpu: Prevent recovery work from being queued during device removal (CVSS 7.8, Linux)
- [CVE-2025-39895](https://cve.now/CVE-2025-39895.md): sched: Fix sched\_numa\_find\_nth\_cpu() if mask offline (CVSS 5.5, Linux)
- [CVE-2025-39894](https://cve.now/CVE-2025-39894.md): netfilter: br\_netfilter: do not check confirmed bit in br\_nf\_local\_in() after confirm (CVSS 7.5, Linux)
- [CVE-2025-39893](https://cve.now/CVE-2025-39893.md): spi: spi-qpic-snand: unregister ECC engine on probe error and device remove (CVSS 5.5, Linux)
- [CVE-2025-39892](https://cve.now/CVE-2025-39892.md): ASoC: soc-core: care NULL dirver name on snd\_soc\_lookup\_component\_nolocked() (CVSS 5.5, Linux)
- [CVE-2025-39891](https://cve.now/CVE-2025-39891.md): wifi: mwifiex: Initialize the chan\_stats array to zero (no CVSS, Linux)
- [CVE-2025-11226](https://cve.now/CVE-2025-11226.md): Conditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino (CVSS 7.0, QOS.CH Sarl Logback-core · ch.qos.logback:logback-core)
- [CVE-2020-36852](https://cve.now/CVE-2020-36852.md): Custom Searchable Data Entry System \<= 1.7.1 - Unauthenticated Database Wiping (CVSS 9.1, ghazale Custom Searchable Data Entry System)
- [CVE-2025-9512](https://cve.now/CVE-2025-9512.md): Schema & Structured Data for WP & AMP \< 1.50 - Unauthenticated Stored-XSS (CVSS 6.1, Schema & Structured Data for WP & AMP)
- [CVE-2025-10538](https://cve.now/CVE-2025-10538.md): Authentication Bypass in LG Innotek Camera (CVSS 8.8, LG Innotek Camera Model LND7210 · LG Innotek Camera Model L…)
- [CVE-2025-9075](https://cve.now/CVE-2025-9075.md): ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns \<= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, bdthemes ZoloBlocks – Gutenberg Block Editor Plugin with Ad…)
- [CVE-2025-10735](https://cve.now/CVE-2025-10735.md): Block For Mailchimp – Easy Mailchimp Form Integration \<= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery (CVSS 4.0, bplugins Block for Mailchimp – Add Email Subscription Forms…)
- [CVE-2025-10744](https://cve.now/CVE-2025-10744.md): File Manager, Code editor, backup by Managefy \<= 1.6.1 - Unauthenticated Information Exposure (CVSS 5.9, softdiscover File Manager, Code Editor, and Backup by Manag…)
- [CVE-2024-57494](https://cve.now/CVE-2024-57494.md): Cross Site Scripting vulnerability in Neto E-Commerce CMS v.6.313.0 through v.6.3115 allows a remote attacker to escalate privileges via the (CVSS 6.5)
- [CVE-2025-28357](https://cve.now/CVE-2025-28357.md): A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP (CVSS 8.8)
- [CVE-2025-43718](https://cve.now/CVE-2025-43718.md): Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata (such as (CVSS 2.9, freedesktop Poppler)
- [CVE-2025-46205](https://cve.now/CVE-2025-46205.md): A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Servic (CVSS 8.1)
- [CVE-2025-52039](https://cve.now/CVE-2025-52039.md): In Frappe ERPNext 15.57.5, the function get\_material\_requests\_based\_on\_supplier() at erpnext/stock/doctype/material\_request/material\_request (CVSS 8.2)
- [CVE-2025-52040](https://cve.now/CVE-2025-52040.md): In Frappe ERPNext 15.57.5, the function get\_blanket\_orders() at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows (CVSS 8.2)
- [CVE-2025-52041](https://cve.now/CVE-2025-52041.md): In Frappe ERPNext 15.57.5, the function get\_stock\_balance\_for() at erpnext/stock/doctype/stock\_reconciliation/stock\_reconciliation.py is vul (CVSS 8.2)
- [CVE-2025-52042](https://cve.now/CVE-2025-52042.md): In Frappe ERPNext 15.57.5, the function get\_rfq\_containing\_supplier() at erpnext/buying/doctype/request\_for\_quotation/request\_for\_quotation. (CVSS 8.2)
- [CVE-2025-56514](https://cve.now/CVE-2025-56514.md): Cross Site Scripting (XSS) vulnerability in Fiora chat application 1.0.0 allows executes arbitrary JavaScript when malicious SVG files are r (CVSS 4.6, fiora)
- [CVE-2025-56515](https://cve.now/CVE-2025-56515.md): File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. (CVSS 8.8, fiora)
- [CVE-2025-56588](https://cve.now/CVE-2025-56588.md): Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution (RCE) vulnerability in the User module configuration via the c (CVSS 8.8, dolibarr/dolibarr)
- [CVE-2025-57275](https://cve.now/CVE-2025-57275.md): Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf. (CVSS 5.5, spdk)
- [CVE-2025-57389](https://cve.now/CVE-2025-57389.md): A reflected cross-site scripting (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to exe (CVSS 5.4)
- [CVE-2025-57393](https://cve.now/CVE-2025-57393.md): A stored cross-site scripting (XSS) in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to ex (CVSS 8.8)
- [CVE-2025-57444](https://cve.now/CVE-2025-57444.md): An authenticated cross-site scripting (XSS) vulnerability in the Administrative interface of Radware AlteonOS Web UI Management v33.0.4.50 a (CVSS 6.1)
- [CVE-2025-59681](https://cve.now/CVE-2025-59681.md): An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. (CVSS 7.1, djangoproject Django · django)
- [CVE-2025-59682](https://cve.now/CVE-2025-59682.md): An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. (CVSS 3.1, djangoproject Django · django)
- [CVE-2025-59684](https://cve.now/CVE-2025-59684.md): DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking. (CVSS 8.8)
- [CVE-2025-59685](https://cve.now/CVE-2025-59685.md): Kazaar 1.25.12 allows a JWT with none in the alg field. (CVSS 5.3)
- [CVE-2025-59686](https://cve.now/CVE-2025-59686.md): Kazaar 1.25.12 allows /api/v1/org-id/orders/order-id/documents calls with a modified order-id. (CVSS 6.5)
- [CVE-2025-59687](https://cve.now/CVE-2025-59687.md): IMPAQTR Aurora before 1.36 allows Insecure Direct Object Reference attacks against the users list, organization details, bookmarks, and noti (CVSS 4.3)
- [CVE-2025-60991](https://cve.now/CVE-2025-60991.md): A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javas (CVSS 8.8)
- [CVE-2025-61044](https://cve.now/CVE-2025-61044.md): TOTOLINK X18 V9.1.0cu.2053\_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyM (CVSS 6.5)
- [CVE-2025-61045](https://cve.now/CVE-2025-61045.md): TOTOLINK X18 V9.1.0cu.2053\_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAge (CVSS 8.8)
- [CVE-2025-61188](https://cve.now/CVE-2025-61188.md): Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. (CVSS 6.3)
- [CVE-2025-61189](https://cve.now/CVE-2025-61189.md): Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. (CVSS 6.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.