CVEs published October 7, 2025
240 CVEs were published on October 7, 2025: 6 critical, 66 high.
- Published
- 240
- Critical
- 6
- High
- 66
- Medium
- 73
- Low
- 5
- Unrated
- 90
- Now in CISA KEV
- 0
- Fix available
- 89
Most affected products
- Linux
- 118
- Dell PowerProtect Data Domain with Data Domain Operating… +2
- 13
- Planet WGR-500
- 9
- SourceCodester Hotel and Lodge Management System
- 9
- Nozomi Networks Guardian · Nozomi Networks CMC
- 7
- Dell PowerProtect Data Domain with Data Domain Operating… +1
- 6
- code-projects Online Hotel Reservation System
- 4
- OPEXUS FOIAXpress
- 4
- Tenda AC15
- 4
- Ankitects Anki
- 3
Critical 6
- CVE-2025-11462Local Privilege Escalation Vulnerability in AWS Client VPN macOS ClientAWS Client VPN
- CVE-2025-3450Automation Runtime SDM requests may impact systemB&R Industrial Automation Automation Runtime
- CVE-2023-53629fs: dlm: fix use after free in midcomms commitLinux
- CVE-2025-0603SQLi in Callvision Healthcare's Callvision Emergency CodeCallvision Healthcare Callvision Emergency Code
- CVE-2025-44823Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.phNagios Log Server
- CVE-2025-52021A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0.
High 66
- CVE-2025-11408D-Link DI-7001 MINI dbsrv.asp buffer overflowD-Link DI-7001 MINI
- CVE-2025-6242Vllm: server side request forgery (ssrf) in mediaconnectorRed Hat AI Inference Server · Red Hat Enterprise Linux AI +1
- CVE-2025-61910NASA ION-DTN BPv7 4.1.3s Uncontrolled Memory Allocation that leads to Denial-of-Servicenasa-jpl ION-DTN
- CVE-2025-43727Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasDell PowerProtect Data Domain with Data Domain Operating… +1
- CVE-2025-11192Fabric Engine (VOSS) AutoSense Authentication BypassExtreme Networks Fabric Engine
- CVE-2025-61784LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilitieshiyouga LLaMA-Factory · llamafactory
- CVE-2025-43914Dell PowerProtect Data Domain BoostFS for Linux Ubuntu systems of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release versionDell PowerProtect Data Domain BoostFS for Linux Ubuntu F… +2
- CVE-2025-36156IBM InfoSphere Data Replication VSAM for z/OS Remote Source code executionIBM InfoSphere Data Replication VSAM for z/OS Remote Source
- CVE-2023-53683fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()Linux
- CVE-2023-53680NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGALLinux
- CVE-2023-53679wifi: mt7601u: fix an integer underflowLinux
- CVE-2023-53676scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()Linux
- CVE-2023-53675scsi: ses: Fix possible desc_ptr out-of-bounds accessesLinux
- CVE-2023-53674clk: Fix memory leak in devm_clk_notifier_register()Linux
- CVE-2023-53673Bluetooth: hci_event: call disconnect callback before deleting connLinux
- CVE-2023-53669tcp: fix skb_copy_ubufs() vs BIG TCPLinux
- CVE-2023-53660bpf, cpumap: Handle skb as well when clean up ptr_ringLinux
- CVE-2023-53659iavf: Fix out-of-bounds when setting channels on removeLinux
- CVE-2022-50555tipc: fix a null-ptr-deref in tipc_topsrv_acceptLinux
- CVE-2022-50543RDMA/rxe: Fix mr->map double freeLinux
- CVE-2022-50536bpf, sockmap: Fix repeated calls to sock_put() when msg has more_dataLinux
- CVE-2023-53651Input: exc3000 - properly stop timer on shutdownLinux
- CVE-2023-53646drm/i915/perf: add sentinel to xehp_oa_b_countersLinux
- CVE-2023-53645bpf: Make bpf_refcount_acquire fallible for non-owning refsLinux
- CVE-2023-53643nvme-tcp: don't access released socket during error recoveryLinux
- CVE-2023-53640ASoC: lpass: Fix for KASAN use_after_free out of boundsLinux
- CVE-2023-53638octeon_ep: cancel queued works in probe error pathLinux
- CVE-2023-53635netfilter: conntrack: fix wrong ct->timeout valueLinux
- CVE-2023-53630iommufd: Fix unpinning of pages when an access is presentLinux
- CVE-2023-53627scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.listLinux
- CVE-2023-53626ext4: fix possible double unlock when moving a directoryLinux
- CVE-2023-53619netfilter: conntrack: Avoid nf_ct_helper_hash uses after freeLinux
- CVE-2022-50528drm/amdkfd: Fix memory leakageLinux
- CVE-2022-50518parisc: Fix locking in pdc_iodc_print() firmware callLinux
- CVE-2022-50517mm/huge_memory: do not clobber swp_entry_t during THP splitLinux
- CVE-2025-61772Rack's multipart parser buffers unbounded per-part headers, enabling DoS (memory exhaustion)rack
- CVE-2025-61771Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)rack
- CVE-2023-6215HP Sure Start IFD Protection - BIOS Security UpdateHP Sure Start IFD Protection
- CVE-2025-61770Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)rack
- CVE-2025-59425vLLM vulnerable to timing attack at bearer authvllm-project vllm · vllm
- CVE-2025-25009Kibana Cross-Site Scripting (XSS)Elastic Kibana
- CVE-2025-54402Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54401Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54400Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54399Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54404Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54403Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-48826A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54406Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2025-54405Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.Planet WGR-500
- CVE-2021-22291EIBPORT Reflected XSSABB EIBPORT V3 KNX
- CVE-2025-40889Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40886Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-3719Incorrect authorization for CLI in Guardian/CMC before 25.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-11389Tenda AC15 saveAutoQos stack-based overflowTenda AC15
- CVE-2025-11388Tenda AC15 setNotUpgrade stack-based overflowTenda AC15
- CVE-2025-11387Tenda AC15 fast_setting_pppoe_set stack-based overflowTenda AC15
- CVE-2025-11386Tenda AC15 POST Parameter SetDDNSCfg stack-based overflowTenda AC15
- CVE-2025-11385Tenda AC20 fast_setting_wifi_set sscanf buffer overflowTenda AC20
- CVE-2025-11356Tenda AC23 SetStaticRouteCfg sscanf buffer overflowTenda AC23
- CVE-2025-11355UTT 1250GW aspChangeChannel strcpy buffer overflowUTT 1250GW
- CVE-2025-10162OrderConvo <= 15.1 - Unauthenticated Arbitrary File ReadAdmin and Customer Messages After Order for WooCommerce: Or…
- CVE-2025-11362Versions of the package pdfmake from 0.3.0-beta.1 and before 0.3.0-beta.17 are vulnerable to Allocation of Resources Without Limits or Throtpdfmake · org.webjars.npm:pdfmake
- CVE-2025-44824Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagiosloNagios Log Server
- CVE-2025-50505Clash Verge Rev thru 2.2.3 (fixed in 2.3.0) forces the installation of system services(clash-verge-service) by default and exposes key funct
- CVE-2025-57564CubeAPM nightly-2025-08-01-1 allow unauthenticated attackers to inject arbitrary log entries into production systems via the /api/logs/inser
Medium, low and unrated 168
- CVE-2025-11417Campcodes Advanced Online Voting Management System voters_add.php unrestricted uploadCampcodes Advanced Online Voting Management System
- CVE-2025-61999OPEXUS FOIAXpress stored XSS via logo imageOPEXUS FOIAXpress
- CVE-2025-61998OPEXUS FOIAXpress stored XSS via Hyperlink ManagerOPEXUS FOIAXpress
- CVE-2025-61997OPEXUS FOIAXpress stored XSS via banner imageOPEXUS FOIAXpress
- CVE-2025-61996OPEXUS FOIAXpress stored XSS via annual report templateOPEXUS FOIAXpress
- CVE-2025-11416PHPGurukul Beauty Parlour Management System invoices.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-11415PHPGurukul Beauty Parlour Management System customer-list.php sql injectionPHPGurukul Beauty Parlour Management System
- CVE-2025-11414GNU Binutils Linker elflink.c get_link_hash_entry out-of-boundsGNU Binutils
- CVE-2025-43822Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.4.3.15 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2Liferay Portal · Liferay DXP +1
- CVE-2025-11413GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-boundsGNU Binutils
- CVE-2025-11412GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-boundsGNU Binutils
- CVE-2025-43823Cross-site scripting (XSS) vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 202Liferay Portal · Liferay DXP +1
- CVE-2025-11410Campcodes Advanced Online Voting Management System voters_add.php sql injectionCampcodes Advanced Online Voting Management System
- CVE-2025-11409Campcodes Advanced Online Voting Management System index.php sql injectionCampcodes Advanced Online Voting Management System
- CVE-2025-11407D-Link DI-7001 MINI upgrade_filter.asp os command injectionD-Link DI-7001 MINI
- CVE-2025-36565Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasDell PowerProtect Data Domain with Data Domain Operating… +1
- CVE-2025-36566Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasDell PowerProtect Data Domain with Data Domain Operating… +1
- CVE-2025-36569Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasDell PowerProtect Data Domain with Data Domain Operating… +1
- CVE-2025-11406kaifangqian kaifangqian-base SysUserController.java getAllUsers information disclosurekaifangqian-base
- CVE-2025-36567Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 releasDell PowerProtect Data Domain with Data Domain Operating… +1
- CVE-2025-43910Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-43909Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-43905Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-11405SourceCodester Hotel and Lodge Management System del_tax.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-45375Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-61776Dependency-Track possibly discloses private NuGet repository credentials to api.nuget.orgDependencyTrack dependency-track
- CVE-2025-43913Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-61670Wasmtime has memory leak in C API with `externref` and `anyref` typesbytecodealliance wasmtime · wasmtime-bin +1
- CVE-2025-43912Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-43891Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-43889Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.4, LTS2024 release VerDell PowerProtect Data Domain with Data Domain Operating… +1
- CVE-2025-11404SourceCodester Hotel and Lodge Management System save_tax.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-43934Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-43908Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-3449Weak Session Token used in Automation Runtime SDMB&R Industrial Automation Automation Runtime
- CVE-2025-3448XSS on SDMB&R Industrial Automation Automation Runtime
- CVE-2025-43907Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-8291ZIP64 End of Central Directory (EOCD) Locator record offset not checkedPython Software Foundation CPython
- CVE-2025-43911Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-43906Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-11403SourceCodester Hotel and Lodge Management System del_booking.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-43890Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasDell PowerProtect Data Domain with Data Domain Operating… +2
- CVE-2025-1826IBM Jazz Foundation cross-site scriptingIBM Jazz Foundation
- CVE-2025-11402SourceCodester Hotel and Lodge Management System del_curr.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-11401SourceCodester Hotel and Lodge Management System save_curr.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-11400SourceCodester Hotel and Lodge Management System del_room.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-11399SourceCodester Hotel and Lodge Management System save_room.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2023-53687tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clkLinux
- CVE-2023-53686net/handshake: fix null-ptr-deref in handshake_nl_done_doit()Linux
- CVE-2023-53685tun: Fix memory leak for detached NAPI queue.Linux
- CVE-2023-53684xfrm: Zero padding when dumping algos and encapLinux
- CVE-2023-53682hwmon: (xgene) Fix ioremap and memremap leakLinux
- CVE-2023-53681bcache: Fix __bch_btree_node_alloc to make the failure behavior consistentLinux
- CVE-2023-53678drm/i915: Fix system suspend without fbdev being initializedLinux
- CVE-2023-53677drm/i915: Fix memory leaks in i915 selftestsLinux
- CVE-2023-53672btrfs: output extra debug info if we failed to find an inline backrefLinux
- CVE-2023-53671srcu: Delegate work to the boot cpu if using SRCU_SIZE_SMALLLinux
- CVE-2023-53670nvme-core: fix dev_pm_qos memleakLinux
- CVE-2023-53668ring-buffer: Fix deadloop issue on reading trace_pipeLinux
- CVE-2023-53667net: cdc_ncm: Deal with too low values of dwNtbOutMaxSizeLinux
- CVE-2023-53666ASoC: codecs: wcd938x: fix missing mbhc init error handlingLinux
- CVE-2023-53665md: don't dereference mddev after export_rdev()Linux
- CVE-2023-53664OPP: Fix potential null ptr dereference in dev_pm_opp_get_required_pstate()Linux
- CVE-2023-53663KVM: nSVM: Check instead of asserting on nested TSC scaling supportLinux
- CVE-2023-53662ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}Linux
- CVE-2023-53661bnxt: avoid overflow in bnxt_get_nvram_directory()Linux
- CVE-2023-53658spi: bcm-qspi: return error if neither hif_mspi nor mspi is availableLinux
- CVE-2023-53657ice: Don't tx before switchdev is fully configuredLinux
- CVE-2023-53656drivers/perf: hisi: Don't migrate perf to the CPU going to teardownLinux
- CVE-2023-53655rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-edLinux
- CVE-2022-50554blk-mq: avoid double ->queue_rq() because of early timeoutLinux
- CVE-2022-50553tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx'Linux
- CVE-2022-50552blk-mq: use quiesced elevator switch when reinitializing queuesLinux
- CVE-2022-50551wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request()Linux
- CVE-2022-50550blk-iolatency: Fix memory leak on add_disk() failuresLinux
- CVE-2022-50549dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadataLinux
- CVE-2022-50548media: i2c: hi846: Fix memory leak in hi846_parse_dt()Linux
- CVE-2022-50547media: solo6x10: fix possible memory leak in solo_sysfs_init()Linux
- CVE-2022-50546ext4: fix uninititialized value in 'ext4_evict_inode'Linux
- CVE-2022-50545r6040: Fix kmemleak in probe and removeLinux
- CVE-2022-50544usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()Linux
- CVE-2022-50542media: si470x: Fix use-after-free in si470x_int_in_callback()Linux
- CVE-2022-50541dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflowLinux
- CVE-2022-50540dmaengine: qcom-adm: fix wrong sizeof config in slave_configLinux
- CVE-2022-50539ARM: OMAP2+: omap4-common: Fix refcount leak bugLinux
- CVE-2022-50538vme: Fix error not catched in fake_init()Linux
- CVE-2022-50537firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()Linux
- CVE-2022-50535drm/amd/display: Fix potential null-deref in dm_resumeLinux
- CVE-2023-53654octeontx2-af: Add validation before accessing cgx and lmacLinux
- CVE-2023-53653media: amphion: fix REVERSE_INULL issues reported by coverityLinux
- CVE-2023-53652vdpa: Add features attr to vdpa_nl_policy for nlattr length checkLinux
- CVE-2023-53650fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()Linux
- CVE-2023-53649perf trace: Really free the evsel->priv areaLinux
- CVE-2023-53648ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixerLinux
- CVE-2023-53647Drivers: hv: vmbus: Don't dereference ACPI root object handleLinux
- CVE-2023-53644media: radio-shark: Add endpoint checksLinux
- CVE-2023-53642x86: fix clear_user_rep_good() exception handling annotationLinux
- CVE-2023-53641wifi: ath9k: hif_usb: fix memory leak of remain_skbsLinux
- CVE-2023-53639wifi: ath6kl: reduce WARN to dev_dbg() in callbackLinux
- CVE-2023-53637media: i2c: ov772x: Fix memleak in ov772x_probe()Linux
- CVE-2023-53636clk: microchip: fix potential UAF in auxdev release callbackLinux
- CVE-2023-53634bpf, arm64: Fixed a BTI error on returning to patched functionLinux
- CVE-2023-53633accel/qaic: Fix a leak in map_user_pages()Linux
- CVE-2023-53632net/mlx5e: Take RTNL lock when needed before calling xdp_set_features()Linux
- CVE-2023-53631platform/x86: dell-sysman: Fix reference leakLinux
- CVE-2023-53628drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcsLinux
- CVE-2023-53625drm/i915/gvt: fix vgpu debugfs clean in removeLinux
- CVE-2023-53624net/sched: sch_fq: fix integer overflow of "credit"Linux
- CVE-2023-53623mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()Linux
- CVE-2023-53622gfs2: Fix possible data races in gfs2_show_options()Linux
- CVE-2023-53621memcontrol: ensure memcg acquired by id is properly set upLinux
- CVE-2023-53620md: fix soft lockup in status_resyncLinux
- CVE-2023-53618btrfs: reject invalid reloc tree root keys with stack dumpLinux
- CVE-2023-53617soc: aspeed: socinfo: Add kfree for kstrdupLinux
- CVE-2022-50534dm thin: Use last transaction's pmd->root when commit failedLinux
- CVE-2022-50533wifi: mac80211: mlme: fix null-ptr deref on failed assocLinux
- CVE-2022-50532scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add()Linux
- CVE-2022-50531tipc: fix an information leak in tipc_topsrv_kern_subscrLinux
- CVE-2022-50530blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping()Linux
- CVE-2022-50529test_firmware: fix memory leak in test_firmware_init()Linux
- CVE-2022-50527drm/amdgpu: Fix size validation for non-exclusive domains (v4)Linux
- CVE-2022-50526drm/msm/dp: fix memory corruption with too many bridgesLinux
- CVE-2022-50525iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe()Linux
- CVE-2022-50524iommu/mediatek: Check return value after calling platform_get_resource()Linux
- CVE-2022-50523clk: rockchip: Fix memory leak in rockchip_clk_register_pll()Linux
- CVE-2022-50522mcb: mcb-parse: fix error handing in chameleon_parse_gdd()Linux
- CVE-2022-50521platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]()Linux
- CVE-2022-50520drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios()Linux
- CVE-2022-50519nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failureLinux
- CVE-2022-50516fs: dlm: fix invalid derefence of sb_lvbptrLinux
- CVE-2022-50515drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue()Linux
- CVE-2022-50514usb: gadget: f_hid: fix refcount leak on error pathLinux
- CVE-2022-50513staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv()Linux
- CVE-2022-50512ext4: fix potential memory leak in ext4_fc_record_regions()Linux
- CVE-2022-50511lib/fonts: fix undefined behavior in bit shift for get_default_fontLinux
- CVE-2022-50510perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init()Linux
- CVE-2022-50509media: coda: Add check for kmallocLinux
- CVE-2025-11398SourceCodester Hotel and Lodge Management System Profile profile.php unrestricted uploadSourceCodester Hotel and Lodge Management System
- CVE-2025-11397SourceCodester Hotel and Lodge Management System login.php sql injectionSourceCodester Hotel and Lodge Management System
- CVE-2025-37728Kibana Insufficiently Protected Credentials in the CrowdStrike ConnectorElastic Kibana
- CVE-2025-53476A denial of service vulnerability exists in the ModbusTCP server functionality of OpenPLC _v3 a931181e8b81e36fadf7b74d5cba99b73c3f6d58.OpenPLC_v3
- CVE-2025-11396code-projects Simple Food Ordering System product.php sql injectioncode-projects Simple Food Ordering System
- CVE-2025-40888Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40887Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40885Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-3718Client-side path traversal in Guardian/CMC before 25.2.0Nozomi Networks Guardian · Nozomi Networks CMC
- CVE-2025-40676Múltiples vulnerabilidades en Negotiator de BBMRI-ERICBBMRI-ERIC Negotiator
- CVE-2025-40649Múltiples vulnerabilidades en Negotiator de BBMRI-ERICBBMRI-ERIC Negotiator
- CVE-2025-11390PHPGurukul Cyber Cafe Management System POST Parameter search.php cross site scriptingPHPGurukul Cyber Cafe Management System
- CVE-2025-11360jakowenko double-take API app.js app.use cross site scriptingjakowenko double-take
- CVE-2025-11359code-projects Simple Banking System transfermoney.php sql injectioncode-projects Simple Banking System
- CVE-2025-10645WP Reset <= 2.05 - Unauthenticated Sensitive Information Exposure via wf-licensing.logwebfactory WP Reset
- CVE-2025-11358code-projects Simple Banking System removeuser.php sql injectioncode-projects Simple Banking System
- CVE-2025-11357code-projects Simple Banking System createuser.php sql injectioncode-projects Simple Banking System
- CVE-2025-7400Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Featured Image Custom Fieldsmarceljm Featured Image from URL
- CVE-2025-11354code-projects Online Hotel Reservation System addslideexec.php unrestricted uploadcode-projects Online Hotel Reservation System
- CVE-2025-11353code-projects Online Hotel Reservation System addgalleryexec.php unrestricted uploadcode-projects Online Hotel Reservation System
- CVE-2025-11352code-projects Online Hotel Reservation System addexec.php unrestricted uploadcode-projects Online Hotel Reservation System
- CVE-2025-11351code-projects Online Hotel Reservation System editpicexec.php unrestricted uploadcode-projects Online Hotel Reservation System
- CVE-2025-11350Campcodes Online Apartment Visitor Management System bwdates-reports-details.php sql injectionCampcodes Online Apartment Visitor Management System
- CVE-2025-11349Campcodes Online Apartment Visitor Management System search-visitor.php sql injectionCampcodes Online Apartment Visitor Management System
- CVE-2025-11348Campcodes Online Apartment Visitor Management System index.php sql injectionCampcodes Online Apartment Visitor Management System
- CVE-2025-11347code-projects Student Crud Operation Add Student Page/Edit Student add.php move_uploaded_file unrestricted uploadcode-projects Student Crud Operation
- CVE-2025-56243A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the event
- CVE-2025-60312Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XSS) in the "Markdown Input" field, allowing a remot
- CVE-2025-62185In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed Ankitects Anki
- CVE-2025-62186Ankitects Anki before 25.02.5 allows a crafted shared deck on Windows to execute arbitrary commands when playing audio because of URL schemeAnkitects Anki
- CVE-2025-62187In Ankitects Anki before 25.02.6, crafted sound file references could cause files to be written to arbitrary locations on Windows and Linux Ankitects Anki