CVEs published December 24, 2025
494 CVEs were published on December 24, 2025: 20 critical, 139 high.
- Published
- 494
- Critical
- 20
- High
- 139
- Medium
- 110
- Low
- 2
- Unrated
- 223
- Now in CISA KEV
- 0
- Fix available
- 108
Most affected products
- Linux
- 322
- Microhard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- 7
- iWT FaceSentry Access Control System
- 3
- Riello NetMan
- 3
- SOCA Technology Co. SOCA Access Control System
- 3
- Beward R&D Co. N100 H.264 VGA IP Camera
- 2
- code-projects Student Information System
- 2
- devolo AG dLAN 550 duo+ Starter Kit
- 2
- Echo Call Center Services Trade and Industry Specto CM
- 2
- Essekia Tablesome
- 2
Critical 20
- CVE-2025-8769MegaSys Computer Technologies Telenium Online Web Application Improper Input ValidationMegaSys Computer Technologies Telenium Online Web Applicati…
- CVE-2025-68916Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code exRiello NetMan
- CVE-2019-25241FaceSentry Access Control System 6.4.8 Remote SSH Root AccessiWT FaceSentry Access Control System
- CVE-2018-25147Microhard Systems IPn4G 1.1.0 Default Credentials Authentication BypassMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25140FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated Websocket Device ManipulationFLIR Systems Thermal Traffic Cameras
- CVE-2018-25138FLIR AX8 Thermal Camera 1.32.16 Hard-Coded Credentials Authentication BypassFLIR Systems FLIR AX8 Thermal Camera
- CVE-2018-25135Anviz AIM CrossChex Standard 4.3.6.0 CSV Injection via User ImportAnviz Biometric Technology Co. Anviz AIM CrossChex Standard
- CVE-2018-25134Synaccess netBooter NP-02x/NP-08x 6.8 Authentication Bypass via webNewAcct.cgiSynaccess Networks netBooter NP-02x/NP-08x
- CVE-2018-25128SOCA Access Control System 180612 SQL Injection and Authentication BypassSOCA Technology Co. SOCA Access Control System
- CVE-2023-54094net: prevent skb corruption on frag list segmentationLinux
- CVE-2023-54090ixgbe: Fix panic during XDP_TX with > 64 CPUsLinux
- CVE-2023-54076smb: client: fix missed ses refcountingLinux
- CVE-2022-50717nvmet-tcp: add bounds check on Transfer TagLinux
- CVE-2025-68745scsi: qla2xxx: Clear cmds after chip resetLinux
- CVE-2025-68741scsi: qla2xxx: Fix improper freeing of purex itemLinux
- CVE-2023-53996x86/sev: Make enc_dec_hypercall() accept a size instead of npagesLinux
- CVE-2023-53867ceph: fix potential use-after-free bug when trimming capsLinux
- CVE-2025-68726crypto: aead - Fix reqsize handlingLinux
- CVE-2025-68359btrfs: fix double free of qgroup record after failure to add delayed ref headLinux
- CVE-2025-13773Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Unauthenticated Remote Code Executiontychesoftwares Print Invoice & Delivery Notes for WooCommer…
High 139
- CVE-2025-68922OpenOps before 0.6.11 allows remote code execution in the Terraform block.OpenOps
- CVE-2025-68920C-Kermit (aka ckermit) through 10.0 Beta.12 (aka 416-beta12) before 244644d allows a remote Kermit system to overwrite files on the local sykermitproject C-Kermit
- CVE-2025-3232Mitsubishi Electric Europe smartRTU Missing Authentication for Critical FunctionMitsubishi Electric Europe smartRTU
- CVE-2019-25258LogicalDOC Enterprise 7.7.4 Multiple Post-Authentication Directory Traversal VulnerabilitiesLogicalDOC Srl LogicalDOC Enterprise
- CVE-2019-25257LogicalDOC Enterprise 7.7.4 Authenticated Command Execution via Binary Path ManipulationLogicalDOC Srl LogicalDOC Enterprise
- CVE-2019-25256VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory TraversalVideoFlow Digital Video Protection DVP
- CVE-2019-25255VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code ExecutionVideoFlow Digital Video Protection DVP
- CVE-2019-25253KYOCERA Net Admin 3.4.0906 Unauthenticated XML External Entity InjectionKYOCERA Net Admin
- CVE-2019-25249devolo dLAN 500 AV Wireless+ 3.1.0-1 Remote Code Execution via htmlmgrdevolo AG dLAN 550 duo+ Starter Kit
- CVE-2019-25248Beward N100 M2.1.6 Unauthenticated RTSP Video Stream DisclosureBeward N100 H.264 VGA IP Camera
- CVE-2019-25246Beward N100 H.264 VGA IP Camera M2.1.6 Authenticated File DisclosureBeward R&D Co. N100 H.264 VGA IP Camera
- CVE-2019-25245Ross Video DashBoard 8.5.1 Privilege Escalation via Insecure PermissionsRoss Video DashBoard
- CVE-2019-25243FaceSentry 6.4.8 Authenticated Remote Command Injection via Ping TestiWT FaceSentry Access Control System
- CVE-2019-25240Rifatron 5brid DVR 5brid DVR (HD6-532/516, DX6-516/508/504, MX6-516/508/504, EH6-504) Unauthenticated Live Stream Disclosure via animate.cgiRifatron Co. DVR
- CVE-2019-25239V-SOL GPON/EPON OLT Platform 2.03 Unauthenticated Configuration DownloadGuangzhou V-SOLUTION Electronic Technology GPON/EPON OLT Pl…
- CVE-2019-25237V-SOL GPON/EPON OLT Platform 2.03 Privilege Escalation via User Role ParameterGuangzhou V-SOLUTION Electronic Technology Co. SOL GPON/EPO…
- CVE-2019-25236iSeeQ Hybrid DVR WH-H4 1.03R Unauthenticated Live Stream DisclosureiSeeQ Hybrid DVR WH-H4
- CVE-2019-25235Smartwares HOME easy 1.0.9 Client-Side Authentication Bypass via Web PagesSmartwares HOME easy
- CVE-2018-25154GNU Barcode 0.99 Buffer Overflow in Code 93 Encoding MechanismThe GNU Project | Free Software Foundation GNU Barcode
- CVE-2018-25148Microhard Systems IPn4G 1.1.0 Remote Code Execution via Admin InterfaceMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25146Microhard Systems IPn4G 1.1.0 Service Control Denial of ServiceMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25145Microhard Systems IPn4G 1.1.0 Configuration Disclosure via Authenticated DownloadMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25144Microhard Systems IPn4G 1.1.0 Arbitrary File Access via Undocumented System EditorMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25143Microhard Systems IPn4G 1.1.0 Backdoor Jailbreak via Microhard Sh ServiceMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25142NovaRad NovaPACS Diagnostics Viewer 8.5 XML External Entity InjectionNovaRad NovaPACS Diagnostics Viewer
- CVE-2018-25141FLIR Thermal Traffic Cameras V1.01-0bb5b27 Unauthenticated RTSP Stream DisclosureFLIR Thermal Traffic Cameras
- CVE-2018-25139FLIR AX8 Thermal Camera 1.32.16 Unauthenticated RTSP Stream DisclosureFLIR Systems FLIR AX8 Thermal Camera
- CVE-2018-25137FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated Config File DisclosureFLIR Systems FLIR Brickstream 3D+
- CVE-2018-25136FLIR Brickstream 3D+ 2.1.742.1842 Unauthenticated RTSP Stream DisclosureFLIR Systems Brickstream 3D+
- CVE-2018-25129SOCA Access Control System 180612 Information Disclosure via Multiple EndpointsSOCA Technology Co. SOCA Access Control System
- CVE-2025-2515Bluechi: privilege escalation in bluechi via unrestricted cross-node systemd dependenciesEclipse Foundation BlueChi
- CVE-2025-43876iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - get8021xSettingsJohnson Controls iSTAR Ultra, iSTAR Ultra SE · Johnson Cont…
- CVE-2025-43875iSTAR Ultra, Ultra SE, Ultra G2, Ultra G2 SE, iSTAR Edge G2 - Authenticated web application command injection - getOptionsInfoJohnson Controls iSTAR Ultra, iSTAR Ultra SE · Johnson Cont…
- CVE-2025-2155Arbitrary File Upload in EchoCCS's Specto CMEcho Call Center Services Trade and Industry Specto CM
- CVE-2025-68590WordPress Integration for Contact Form 7 HubSpot plugin <= 1.4.2 - SQL Injection vulnerabilityCRM Perks Integration for Contact Form 7 HubSpot
- CVE-2025-68570WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerabilitycaptivateaudio Captivate Sync
- CVE-2025-68506WordPress Docket Cache plugin <= 24.07.03 - Local File Inclusion vulnerabilityNawawi Jamili Docket Cache
- CVE-2025-68038WordPress Icegram Express Pro plugin < 5.9.14 - PHP Object Injection vulnerabilityIcegram Express Pro
- CVE-2025-67909WordPress Membership For WooCommerce plugin <= 3.0.3 - Insecure Direct Object References (IDOR) vulnerabilityWP Swings Membership For WooCommerce
- CVE-2025-67622WordPress Evergreen Post Tweeter plugin <= 1.8.9 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerabilitytitopandub Evergreen Post Tweeter
- CVE-2023-54157binder: fix UAF of alloc->vma in race with munmap()Linux
- CVE-2023-54156sfc: fix crash when reading stats while NIC is resettingLinux
- CVE-2023-54153ext4: turn quotas off if mount failed after enabling quotasLinux
- CVE-2023-54151f2fs: Fix system crash due to lack of free space in LFSLinux
- CVE-2023-54149net: dsa: avoid suspicious RCU usage for synced VLAN-aware MAC addressesLinux
- CVE-2023-54142gtp: Fix use-after-free in __gtp_encap_destroy().Linux
- CVE-2023-54140nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuseLinux
- CVE-2023-54139tracing/user_events: Ensure write index cannot be negativeLinux
- CVE-2023-54135maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()Linux
- CVE-2023-54132erofs: stop parsing non-compact HEAD index if clusterofs is invalidLinux
- CVE-2023-54130hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handlingLinux
- CVE-2023-54129octeontx2-af: Add validation for lmac typeLinux
- CVE-2023-54128fs: drop peer group ids under namespace lockLinux
- CVE-2023-54127fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()Linux
- CVE-2023-54125fs/ntfs3: Return error for inconsistent extended attributesLinux
- CVE-2023-54124f2fs: fix to drop all dirty pages during umount() if cp_error is setLinux
- CVE-2023-54121btrfs: fix incorrect splitting in btrfs_drop_extent_map_rangeLinux
- CVE-2023-54120Bluetooth: Fix race condition in hidp_session_threadLinux
- CVE-2023-54116drm/fbdev-generic: prohibit potential out-of-bounds accessLinux
- CVE-2023-54107blk-cgroup: dropping parent refcount after pd_free_fn() is doneLinux
- CVE-2023-54104mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()Linux
- CVE-2023-54100scsi: qedi: Fix use after free bug in qedi_remove()Linux
- CVE-2023-54098drm/i915/gvt: fix gvt debugfs destroyLinux
- CVE-2023-54096soundwire: fix enumeration completionLinux
- CVE-2023-54095powerpc/iommu: Fix notifiers being shared by PCI and VIO busesLinux
- CVE-2023-54092KVM: s390: pv: fix index value of replaced ASCELinux
- CVE-2023-54088blk-cgroup: hold queue_lock when removing blkg->q_nodeLinux
- CVE-2023-54085mptcp: fix NULL pointer dereference on fastopen early fallbackLinux
- CVE-2023-54083phy: tegra: xusb: Clear the driver reference in usb-phy devLinux
- CVE-2023-54079power: supply: bq27xxx: Fix poll_interval handling and races on removeLinux
- CVE-2022-50780net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failedLinux
- CVE-2022-50758staging: vt6655: fix potential memory leakLinux
- CVE-2022-50757media: camss: Clean up received buffers on failed start of streamingLinux
- CVE-2022-50756nvme-pci: fix mempool alloc sizeLinux
- CVE-2022-50755udf: Avoid double brelse() in udf_rename()Linux
- CVE-2022-50753f2fs: fix to do sanity check on summary infoLinux
- CVE-2022-50752md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk()Linux
- CVE-2022-50750drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failureLinux
- CVE-2022-50747hfs: Fix OOB Write in hfs_asc2macLinux
- CVE-2022-50746erofs: validate the extent length for uncompressed pclustersLinux
- CVE-2022-50745staging: media: tegra-video: fix device_node use after freeLinux
- CVE-2022-50737fs/ntfs3: Validate index root when initialize NTFS securityLinux
- CVE-2023-54077fs/ntfs3: Fix memory leak if ntfs_read_mft failedLinux
- CVE-2023-36525WordPress WPJobBoard plugin <= 5.9.0 - Unauth. Blind SQL Injection (SQLi) vulnerabilityWPJobBoard
- CVE-2025-68608WordPress Userpro plugin <= 5.1.9 - Broken Access Control vulnerabilityDeluxeThemes Userpro
- CVE-2025-68563WordPress Subscribe to Unlock Lite plugin <= 1.3.0 - Local File Inclusion vulnerabilityWP Shuffle Subscribe to Unlock Lite
- CVE-2025-68540WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerabilitythembay Fana
- CVE-2025-68537WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerabilitythembay Zota
- CVE-2025-68530WordPress Bookory theme <= 2.2.7 - Local File Inclusion vulnerabilitypavothemes Bookory
- CVE-2025-68519WordPress Brands for WooCommerce plugin <= 3.8.6.3 - SQL Injection vulnerabilityBeRocket Brands for WooCommerce
- CVE-2025-68496WordPress User Feedback plugin <= 1.10.0 - SQL Injection vulnerabilitySyed Balkhi User Feedback
- CVE-2023-54074net/mlx5e: Use correct encap attribute during invalidationLinux
- CVE-2023-54071wifi: rtw88: use work to update rate to avoid RCU warningLinux
- CVE-2023-54068f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()Linux
- CVE-2023-54067btrfs: fix race when deleting free space root from the dirty cow roots listLinux
- CVE-2023-54065net: dsa: realtek: fix out-of-bounds accessLinux
- CVE-2023-54063fs/ntfs3: Fix OOB read in indx_insert_into_bufferLinux
- CVE-2023-54062ext4: fix invalid free tracking in ext4_xattr_move_to_block()Linux
- CVE-2023-54060iommufd: Set end correctly when doing batch carryLinux
- CVE-2023-54050ubifs: Fix memleak when insert_old_idx() failedLinux
- CVE-2023-54048RDMA/bnxt_re: Prevent handling any completions after qp destroyLinux
- CVE-2023-54046crypto: essiv - Handle EBUSY correctlyLinux
- CVE-2023-54043iommufd: Do not add the same hwpt to the ioas->hwpt_list twiceLinux
- CVE-2022-50736RDMA/siw: Fix immediate work request flush to completion queueLinux
- CVE-2022-50732staging: rtl8192u: Fix use after free in ieee80211_rx()Linux
- CVE-2022-50726net/mlx5: Fix possible use-after-free in async command interfaceLinux
- CVE-2022-50719ALSA: line6: fix stack overflow in line6_midi_transmitLinux
- CVE-2025-68749accel/ivpu: Fix race condition when unbinding BOsLinux
- CVE-2025-68748drm/panthor: Fix UAF race between device unplug and FW event processingLinux
- CVE-2025-68747drm/panthor: Fix UAF on kernel BO VA nodesLinux
- CVE-2025-68746spi: tegra210-quad: Fix timeout handlingLinux
- CVE-2025-68736landlock: Fix handling of disconnected directoriesLinux
- CVE-2025-68735drm/panthor: Prevent potential UAF in group creationLinux
- CVE-2023-54042powerpc/64s: Fix VAS mm use after freeLinux
- CVE-2023-54040ice: fix wrong fallback logic for FDIRLinux
- CVE-2023-54035netfilter: nf_tables: fix underflow in chain reference counterLinux
- CVE-2023-54026opp: Fix use-after-free in lazy_opp_tables after probe deferralLinux
- CVE-2023-54019sched/psi: use kernfs polling functions for PSI trigger pollingLinux
- CVE-2023-54012net: fix stack overflow when LRO is disabled for virtual interfacesLinux
- CVE-2023-54004udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().Linux
- CVE-2023-53997thermal: of: fix double-free on unregistrationLinux
- CVE-2023-53990SMB3: Add missing locks to protect deferred close file listLinux
- CVE-2023-53988fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()Linux
- CVE-2023-53986mips: bmips: BCM6358: disable RAC flush for TP1Linux
- CVE-2022-50701wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio hostLinux
- CVE-2022-50700wifi: ath10k: Delay the unmapping of the bufferLinux
- CVE-2022-50697mrp: introduce active flags to prevent UAF when applicant uninitLinux
- CVE-2025-68730accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context()Linux
- CVE-2025-68724crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_idLinux
- CVE-2025-68379RDMA/rxe: Fix null deref on srq->rq.queue after resize failureLinux
- CVE-2025-68370coresight: tmc: add the handle of the event to the pathLinux
- CVE-2025-68369ntfs3: init run lock for extend inodeLinux
- CVE-2025-68365fs/ntfs3: Initialize allocated memory before useLinux
- CVE-2025-68360wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacksLinux
- CVE-2025-68352spi: ch341: fix out-of-bounds memory access in ch341_transfer_oneLinux
- CVE-2025-68349NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalidLinux
- CVE-2025-68347ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP eventsLinux
- CVE-2025-66444Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center AnalyzerHitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…
- CVE-2025-66445Authorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center AnalyzerHitachi Infrastructure Analytics Advisor · Hitachi Ops Cent…
Medium, low and unrated 335
- CVE-2025-15073itsourcecode Online Frozen Foods Ordering System contact_us.php sql injectionitsourcecode Online Frozen Foods Ordering System
- CVE-2025-68919Fujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express (DX / AF Management Software) before 16.8-16.9.1 PA 2025-12, when collected maintenancFujitsu / Fsas Technologies ETERNUS SF ACM/SC/Express
- CVE-2025-68917ONLYOFFICE Docs before 9.2.1 allows XSS in the textarea of the comment editing form.ONLYOFFICE Document Server
- CVE-2025-68915Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbanner_w.cgi XSS via a crafted banner.Riello NetMan
- CVE-2025-68914Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/login.cgi username SQL Injection.Riello NetMan
- CVE-2019-25254KYOCERA Net Admin 3.4.0906 Cross-Site Request Forgery via User AdministrationKYOCERA Net Admin
- CVE-2019-25252Teradek VidiU Pro 3.0.3 Cross-Site Request Forgery via Password ChangeTeradek VidiU Pro
- CVE-2019-25251Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP SettingsTeradek VidiU Pro
- CVE-2019-25250Devolo dLAN 500 AV Wireless+ 3.1.0-1 Cross-Site Request Forgerydevolo AG dLAN 550 duo+ Starter Kit
- CVE-2019-25247Beward N100 H.264 VGA IP Camera M2.1.6 CSRF Add Admin VulnerabilityBeward R&D Co. N100 H.264 VGA IP Camera
- CVE-2019-25244Legrand BTicino Driver Manager F454 1.0.51 CSRF and Stored XSS VulnerabilitiesBTicino S.p.A. Legrand BTicino Driver Manager F454
- CVE-2019-25242FaceSentry Access Control System 6.4.8 Cross-Site Request Forgery via Web InterfaceiWT FaceSentry Access Control System
- CVE-2019-25238V-SOL GPON/EPON OLT Platform 2.03 Cross-Site Request Forgery VulnerabilityGuangzhou V-SOLUTION Electronic Technology Co. SOL GPON/EPO…
- CVE-2019-25234Carlo Gavazzi SmartHouse Webapp 6.5.33 Cross-Site Request Forgery and XSSCarlo Gavazzi AB SmartHouse Webapp
- CVE-2019-25233AVE DOMINAplus 1.10.x Cross-Site Request Forgery and XSS VulnerabilitiesAVE S.p.A. DOMINAplus
- CVE-2018-25156Teradek Cube 7.3.6 Cross-Site Request Forgery Password ChangeTeradek Cube
- CVE-2018-25155Teradek Slice 7.3.15 Cross-Site Request Forgery via Password ChangeTeradek Slice
- CVE-2018-25152Ecessa Edge EV150 10.7.4 Cross-Site Request Forgery via User ConfigurationEcessa Edge EV150
- CVE-2018-25151Ecessa WANWorx WVR-30 < 10.7.4 Cross-Site Request Forgery via User ConfigurationEcessa WANWorx WVR-30
- CVE-2018-25150Ecessa ShieldLink SL175EHQ 10.7.4 Cross-Site Request Forgery via User ConfigurationEcessa ShieldLink SL175EHQ
- CVE-2018-25149Microhard Systems IPn4G 1.1.0 Cross-Site Request Forgery via Web InterfaceMicrohard Systems 3G/4G Cellular Ethernet and Serial Gatewa…
- CVE-2018-25133Synaccess netBooter NP-0801DU 7.4 Cross-Site Request Forgery via Admin InterfaceSynaccess Networks netBooter NP-0801DU
- CVE-2018-25131Leica Geosystems GR10/GR25/GR30/GR50 GNSS 4.30.063 Stored XSS via Config UploadLeica Geosystems AG GR10/GR25/GR30/GR50 GNSS
- CVE-2018-25130Beward Intercom 2.3.1 Local Credentials Disclosure via Unencrypted DatabaseBeward R&D Co. BEWARD Intercom
- CVE-2018-25127SOCA Access Control System 180612 Cross-Site Request Forgery via Admin InterfaceSOCA Technology Co. SOCA Access Control System
- CVE-2025-36154IBM Concert Software Cleartext Storage in a File or on Disk.IBM Concert
- CVE-2025-68750usb: potential integer overflow in usbg_make_tpg()Linux
- CVE-2025-2154Stored XSS in EchoCCS's Specto CMEcho Call Center Services Trade and Industry Specto CM
- CVE-2025-68606WordPress PostX plugin <= 5.0.3 - Sensitive Data Exposure vulnerabilityWPXPO PostX
- CVE-2025-68605WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
- CVE-2025-68603WordPress Editorial Calendar plugin <= 3.8.8 - Broken Access Control vulnerabilityMarketing Fire Editorial Calendar
- CVE-2025-68602WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerabilityScott Paterson Accept Donations with PayPal & Stripe
- CVE-2025-68601WordPress Five Star Restaurant Reservations plugin <= 2.7.8 - Cross Site Request Forgery (CSRF) vulnerabilityRustaurius Five Star Restaurant Reservations
- CVE-2025-68600WordPress Link Library plugin <= 7.8.7 - Server Side Request Forgery (SSRF) vulnerabilityYannick Lefebvre Link Library
- CVE-2025-68599WordPress YouTube Embed plugin <= 5.4 - Cross Site Scripting (XSS) vulnerabilityEmbeds For YouTube Plugin Support YouTube Embed
- CVE-2025-68598WordPress Page Builder: Live Composer plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerabilityLive Composer Team Page Builder: Live Composer
- CVE-2025-68597WordPress Jobs for WordPress plugin <= 2.8.1 - Cross Site Scripting (XSS) vulnerabilityBlueGlass Interactive AG Jobs for WordPress
- CVE-2025-68596WordPress Bit Assist plugin <= 1.5.11 - Broken Access Control vulnerabilityBit Apps Bit Assist
- CVE-2025-68595WordPress Widgets for Social Photo Feed plugin <= 1.8 - Broken Access Control vulnerabilityTrustindex Widgets for Social Photo Feed
- CVE-2025-68594WordPress Poll, Survey & Quiz Maker Plugin by Opinion Stage plugin <= 19.12.0 - Broken Access Control vulnerabilityPoll, Survey & Quiz Maker Plugin by Opinion Stage
- CVE-2025-68593WordPress WP Adminify plugin <= 4.0.6.1 - Broken Access Control vulnerabilityLiton Arefin WP Adminify
- CVE-2025-68592WordPress WP Adminify plugin <= 4.0.6.1 - Broken Access Control vulnerabilityLiton Arefin WP Adminify
- CVE-2025-68591WordPress Simple File List plugin <= 6.1.18 - Broken Access Control vulnerabilityMitchell Bennis Simple File List
- CVE-2025-68589WordPress WP Telegram Widget and Join Link plugin <= 2.2.12 - Broken Access Control vulnerabilityWP Socio WP Telegram Widget and Join Link
- CVE-2025-68588WordPress TS Poll plugin <= 2.5.5 - Broken Access Control vulnerabilitytotalsoft TS Poll
- CVE-2025-68587WordPress Watu Quiz plugin <= 3.4.5 - Broken Access Control vulnerabilityBob Watu Quiz
- CVE-2025-68586WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerabilityGora Tech Cooked
- CVE-2025-68585WordPress WP Document Revisions plugin <= 3.7.2 - Broken Access Control vulnerabilityBen Balter WP Document Revisions
- CVE-2025-68584WordPress Vimeotheque plugin <= 2.3.5.2 - Cross Site Request Forgery (CSRF) vulnerabilityConstantin Boiangiu Vimeotheque
- CVE-2025-68583WordPress Fast User Switching plugin <= 1.4.10 - Cross Site Request Forgery (CSRF) vulnerabilityTikweb Management Fast User Switching
- CVE-2025-68582WordPress Funnelforms Free plugin <= 3.8 - Broken Access Control vulnerabilityFunnelforms Free
- CVE-2025-68581WordPress YITH Slider for page builders plugin <= 1.0.11 - Broken Access Control vulnerabilityYITHEMES YITH Slider for page builders
- CVE-2025-68580WordPress Advanced Classifieds & Directory Pro plugin <= 3.2.9 - Cross Site Request Forgery (CSRF) vulnerabilitypluginsware Advanced Classifieds & Directory Pro
- CVE-2025-68579WordPress FV Simpler SEO plugin <= 1.9.6 - Broken Access Control vulnerabilityFolioVision FV Simpler SEO
- CVE-2025-68578WordPress Addonify plugin <= 2.0.4 - Broken Access Control vulnerabilityAddonify
- CVE-2025-68577WordPress Virusdie plugin <= 1.1.6 - Broken Access Control vulnerabilityVirusdie
- CVE-2025-68576WordPress Virusdie plugin <= 1.1.6 - Sensitive Data Exposure vulnerabilityVirusdie
- CVE-2025-68575WordPress Wappointment plugin <= 2.7.6 - Broken Access Control vulnerabilityWappointment team Wappointment
- CVE-2025-68574WordPress WPBakery Visual Composer WHMCS Elements plugin <= 1.0.4.3 - Cross Site Scripting (XSS) vulnerabilityvoidcoders WPBakery Visual Composer WHMCS Elements
- CVE-2025-68573WordPress Simple Keyword to Link plugin <= 1.5 - Cross Site Request Forgery (CSRF) vulnerabilityAlessandro Piconi Simple Keyword to Link
- CVE-2025-68572WordPress BBP Core plugin <= 1.4.1 - Broken Access Control vulnerabilitySpider Themes BBP Core
- CVE-2025-68571WordPress SALESmanago plugin <= 3.9.0 - Broken Access Control vulnerabilitySALESmanago & Leadoo
- CVE-2025-68569WordPress WP Time Slots Booking Form plugin <= 1.2.39 - Broken Access Control vulnerabilitycodepeople WP Time Slots Booking Form
- CVE-2025-68568WordPress Claspo – Popups, Spin the Wheel & Email Capture plugin <= 1.0.7 - Broken Access Control vulnerabilityClaspo Popup Builders Claspo – Popups, Spin the Wheel & Ema…
- CVE-2025-68567WordPress My auctions allegro plugin <= 3.6.33 - Cross Site Request Forgery (CSRF) vulnerabilitywphocus My auctions allegro
- CVE-2025-68566WordPress My auctions allegro plugin <= 3.6.35 - Cross Site Scripting (XSS) vulnerabilitywphocus My auctions allegro
- CVE-2025-68565WordPress Twitch Player plugin <= 2.1.3 - Broken Access Control vulnerabilityJayBee Twitch Player
- CVE-2025-67633WordPress Greenhouse Job Board plugin <= 2.7.3 - Cross Site Scripting (XSS) vulnerabilitybrownbagmarketing Greenhouse Job Board
- CVE-2025-67632WordPress Google AdSense for Responsive Design – GARD plugin <= 2.23 - Cross Site Scripting (XSS) vulnerabilityThe Plugin Factory Google AdSense for Responsive Design – G…
- CVE-2025-67631WordPress Gift Hunt plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityEcommerce Platforms Gift Hunt
- CVE-2025-67630WordPress WH Tweaks plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilitywebheadcoder WH Tweaks
- CVE-2025-67629WordPress Basticom Framework plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerabilityBasticom Framework
- CVE-2025-67628WordPress Review Disclaimer plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityAMP-MODE Review Disclaimer
- CVE-2025-67627WordPress Draft Notify plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityTouchOfTech Draft Notify
- CVE-2025-67625WordPress Trade Runner plugin <= 3.14 - Cross Site Request Forgery (CSRF) vulnerabilitytmtraderunner Trade Runner
- CVE-2025-67623WordPress 6Storage Rentals plugin <= 2.22.0 - Server Side Request Forgery (SSRF) vulnerability6Storage Rentals
- CVE-2025-67621WordPress Eight Day Week Print Workflow plugin <= 1.2.5 - Sensitive Data Exposure vulnerability10up Eight Day Week Print Workflow
- CVE-2023-54160firmware: arm_sdei: Fix sleep from invalid context BUGLinux
- CVE-2023-54159usb: mtu3: fix kernel panic at qmu transfer done irq handlerLinux
- CVE-2023-54158btrfs: don't free qgroup space unless specifiedLinux
- CVE-2023-54155net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()Linux
- CVE-2023-54154scsi: target: core: Fix target_cmd_counter leakLinux
- CVE-2023-54152can: j1939: prevent deadlock by moving j1939_sk_errqueue()Linux
- CVE-2023-54150drm/amd: Fix an out of bounds error in BIOS parserLinux
- CVE-2023-54148net/mlx5e: Move representor neigh cleanup to profile cleanup_txLinux
- CVE-2023-54147media: platform: mtk-mdp3: Add missing check and free for ida_allocLinux
- CVE-2023-54146x86/kexec: Fix double-free of elf header bufferLinux
- CVE-2023-54145bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl logLinux
- CVE-2023-54144drm/amdkfd: Fix kernel warning during topology setupLinux
- CVE-2023-54143media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()Linux
- CVE-2023-54141wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018Linux
- CVE-2023-54138drm/msm: fix NULL-deref on irq uninstallLinux
- CVE-2023-54137vfio/type1: fix cap_migration information leakLinux
- CVE-2023-54136serial: sprd: Fix DMA buffer leak issueLinux
- CVE-2023-54134autofs: fix memory leak of waitqueues in autofs_catatonic_modeLinux
- CVE-2023-54133nfp: clean mc addresses in application firmware when closing portLinux
- CVE-2023-54131wifi: rt2x00: Fix memory leak when handling surveysLinux
- CVE-2023-54126crypto: safexcel - Cleanup ring IRQ workqueues on load failureLinux
- CVE-2023-54123md/raid10: fix memleak for 'conf->bio_split'Linux
- CVE-2023-54122drm/msm/dpu: Add check for cstateLinux
- CVE-2023-54119inotify: Avoid reporting event with invalid wdLinux
- CVE-2023-54118serial: sc16is7xx: setup GPIO controller later in probeLinux
- CVE-2023-54117s390/dcssblk: fix kernel crash with list_add corruptionLinux
- CVE-2023-54115pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()Linux
- CVE-2023-54114net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()Linux
- CVE-2023-54113rcu: dump vmalloc memory info safelyLinux
- CVE-2023-54112kcm: Fix memory leak in error path of kcm_sendmsg()Linux
- CVE-2023-54111pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groupsLinux
- CVE-2023-54110usb: rndis_host: Secure rndis_query check against int overflowLinux
- CVE-2023-54109media: rcar_fdp1: Fix refcount leak in probe and remove functionLinux
- CVE-2023-54108scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requestsLinux
- CVE-2023-54106net/mlx5: fix potential memory leak in mlx5e_init_rep_rxLinux
- CVE-2023-54105can: isotp: check CAN address family in isotp_bind()Linux
- CVE-2023-54102scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflowLinux
- CVE-2023-54101driver: soc: xilinx: use _safe loop iterator to avoid a use after freeLinux
- CVE-2023-54099fs: Protect reconfiguration of sb read-write from racing writesLinux
- CVE-2023-54097regulator: stm32-pwr: fix of_iomap leakLinux
- CVE-2023-54093media: anysee: fix null-ptr-deref in anysee_master_xferLinux
- CVE-2023-54091drm/client: Fix memory leak in drm_client_target_clonedLinux
- CVE-2023-54089virtio_pmem: add the missing REQ_OP_WRITE for flush bioLinux
- CVE-2023-54087ubi: Fix possible null-ptr-deref in ubi_free_volume()Linux
- CVE-2023-54086bpf: Add preempt_count_{sub,add} into btf id deny listLinux
- CVE-2023-54084ALSA: firewire-digi00x: prevent potential use after freeLinux
- CVE-2023-54081xen: speed up grant-table reclaimLinux
- CVE-2023-54080btrfs: zoned: skip splitting and logical rewriting on pre-alloc writeLinux
- CVE-2023-54078media: max9286: Free control handlerLinux
- CVE-2022-50783mptcp: use proper req destructor for IPv6Linux
- CVE-2022-50782ext4: fix bug_on in __es_tree_search caused by bad quota inodeLinux
- CVE-2022-50781amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table()Linux
- CVE-2022-50779orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string()Linux
- CVE-2022-50778fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCALLinux
- CVE-2022-50777net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probeLinux
- CVE-2022-50776clk: st: Fix memory leak in st_of_quadfs_setup()Linux
- CVE-2022-50775RDMA/hns: Fix refcount leak in hns_roce_mmapLinux
- CVE-2022-50774crypto: qat - fix DMA transfer directionLinux
- CVE-2022-50773ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interruptLinux
- CVE-2022-50772netdevsim: fix memory leak in nsim_bus_dev_new()Linux
- CVE-2022-50771rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state()Linux
- CVE-2022-50770ocfs2: fix memory leak in ocfs2_mount_volume()Linux
- CVE-2022-50769mmc: mxcmmc: fix return value check of mmc_add_host()Linux
- CVE-2022-50768scsi: smartpqi: Correct device removal for multi-actuator devicesLinux
- CVE-2022-50767fbdev: smscufx: Fix several use-after-free bugsLinux
- CVE-2022-50766btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_bufferLinux
- CVE-2022-50765RISC-V: kexec: Fix memory leak of elf header bufferLinux
- CVE-2022-50764ipv6/sit: use DEV_STATS_INC() to avoid data-racesLinux
- CVE-2022-50763crypto: marvell/octeontx - prevent integer overflowsLinux
- CVE-2022-50762fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst()Linux
- CVE-2022-50761x86/xen: Fix memory leak in xen_init_lock_cpu()Linux
- CVE-2022-50760drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios()Linux
- CVE-2022-50759media: i2c: ov5648: Free V4L2 fwnode data on unbindLinux
- CVE-2022-50754apparmor: fix a memleak in multi_transaction_new()Linux
- CVE-2022-50751configfs: fix possible memory leak in configfs_create_dir()Linux
- CVE-2022-50749acct: fix potential integer overflow in encode_comp_t()Linux
- CVE-2022-50748ipc: mqueue: fix possible memory leak in init_mqueue_fs()Linux
- CVE-2022-50744scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfsLinux
- CVE-2022-50743erofs: Fix pcluster memleak when its block address is zeroLinux
- CVE-2022-50742misc: ocxl: fix possible refcount leak in afu_ioctl()Linux
- CVE-2022-50741media: imx-jpeg: Disable useless interrupt to avoid kernel panicLinux
- CVE-2022-50740wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs()Linux
- CVE-2022-50739fs/ntfs3: Add null pointer check for inode operationsLinux
- CVE-2022-50738vhost-vdpa: fix an iotlb memory leakLinux
- CVE-2023-40679WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerabilityJewel Theme Master Addons for Elementor
- CVE-2023-32120WordPress Hostel plugin <= 1.1.5.1 - Cross Site Scripting (XSS)Bob Hostel
- CVE-2023-28619WordPress Resoto theme <= 1.0.8 - Broken Access Control to Arbitrary Plugin Activationbnayawpguy Resoto
- CVE-2025-68535WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerabilitysunshinephotocart Sunshine Photo Cart
- CVE-2025-68533WordPress WC Builder plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityHasThemes WC Builder
- CVE-2025-68532WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerabilityModelTheme Addons for WPBakery and Elementor
- CVE-2025-68529WordPress WP Email Capture plugin <= 3.12.5 - Cross Site Request Forgery (CSRF) vulnerabilityRhys Wynne WP Email Capture
- CVE-2025-68528WordPress Free Shipping Bar: Amount Left for Free Shipping for WooCommerce plugin <= 2.4.9 - Cross Site Scripting (XSS) vulnerabilityWPFactory Free Shipping Bar: Amount Left for Free Shipping…
- CVE-2025-68527WordPress Academy LMS plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerabilityKodezen Academy LMS
- CVE-2025-68525WordPress Category Icon plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerabilitypixelgrade Category Icon
- CVE-2025-68523WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerabilitySpiffy Plugins Spiffy Calendar
- CVE-2025-68522WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerabilityWpStream
- CVE-2025-68521WordPress WpStream plugin <= 4.9.5 - Broken Access Control vulnerabilityWpStream
- CVE-2025-68517WordPress Tablesome plugin <= 1.1.35.1 - Broken Access Control vulnerabilityEssekia Tablesome
- CVE-2025-68516WordPress Tablesome plugin <= 1.1.35.1 - Sensitive Data Exposure vulnerabilityEssekia Tablesome
- CVE-2025-68513WordPress Bold Timeline Lite plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityboldthemes Bold Timeline Lite
- CVE-2025-68512WordPress Real 3D FlipBook plugin <= 4.11.4 - Cross Site Scripting (XSS) vulnerabilitycreativeinteractivemedia Real 3D FlipBook
- CVE-2025-68511WordPress Gutenverse Form plugin <= 2.3.1 - Broken Access Control vulnerabilityJegstudio Gutenverse Form
- CVE-2025-68509WordPress User Submitted Posts plugin <= 20251121 - Open Redirection vulnerabilityJeff Starr User Submitted Posts
- CVE-2025-68508WordPress Brave plugin <= 0.8.3 - Broken Access Control vulnerabilityBrave
- CVE-2025-68505WordPress H5P plugin <= 1.16.1 - Broken Access Control vulnerabilityicc0rz H5P
- CVE-2025-68500WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerabilitybdthemes Prime Slider – Addons For Elementor
- CVE-2025-68497WordPress Astra Widgets plugin <= 1.2.16 - Cross Site Scripting (XSS) vulnerabilityBrainstorm Force Astra Widgets
- CVE-2025-68494WordPress Premium Addons for Elementor plugin <= 4.11.53 - Sensitive Data Exposure vulnerabilityLeap13 Premium Addons for Elementor
- CVE-2023-54075ASoC: mediatek: common: Fix refcount leak in parse_dai_link_infoLinux
- CVE-2023-54073tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call siteLinux
- CVE-2023-54072ALSA: pcm: Fix potential data race at PCM memory allocation helpersLinux
- CVE-2023-54070igb: clean up in all error paths when enabling SR-IOVLinux
- CVE-2023-54069ext4: fix BUG in ext4_mb_new_inode_pa() due to overflowLinux
- CVE-2023-54066media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xferLinux
- CVE-2023-54064ipmi:ssif: Fix a memory leak when scanning for an adapterLinux
- CVE-2023-54059soc: mediatek: mtk-svs: Enable the IRQ laterLinux
- CVE-2023-54058firmware: arm_ffa: Check if ffa_driver remove is present before executingLinux
- CVE-2023-54057iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameterLinux
- CVE-2023-54056kheaders: Use array declaration instead of charLinux
- CVE-2023-54055RDMA/irdma: Fix memory leak of PBLE objectsLinux
- CVE-2023-54053wifi: iwlwifi: pcie: fix possible NULL pointer dereferenceLinux
- CVE-2023-54052wifi: mt76: mt7921: fix skb leak by txs missing in AMSDULinux
- CVE-2023-54051net: do not allow gso_size to be set to GSO_BY_FRAGSLinux
- CVE-2023-54049rpmsg: glink: Add check for kstrdupLinux
- CVE-2023-54047drm/rockchip: dw_hdmi: cleanup drm encoder during unbindLinux
- CVE-2023-54045audit: fix possible soft lockup in __audit_inode_child()Linux
- CVE-2023-54044spmi: Add a check for remove callback when removing a SPMI driverLinux
- CVE-2022-50735wifi: mt76: do not run mt76u_status_worker if the device is not runningLinux
- CVE-2022-50734nvmem: core: Fix memleak in nvmem_register()Linux
- CVE-2022-50733usb: idmouse: fix an uninit-value in idmouse_openLinux
- CVE-2022-50731crypto: akcipher - default implementation for setting a private keyLinux
- CVE-2022-50730ext4: silence the warning when evicting inode with dioread_nolockLinux
- CVE-2022-50729ksmbd: Fix resource leak in ksmbd_session_rpc_open()Linux
- CVE-2022-50728s390/lcs: Fix return type of lcs_start_xmit()Linux
- CVE-2022-50727scsi: efct: Fix possible memleak in efct_device_init()Linux
- CVE-2022-50725media: vidtv: Fix use-after-free in vidtv_bridge_dvb_init()Linux
- CVE-2022-50724regulator: core: fix resource leak in regulator_register()Linux
- CVE-2022-50723bnxt_en: fix memory leak in bnxt_nvm_test()Linux
- CVE-2022-50722media: ipu3-imgu: Fix NULL pointer dereference in active selection accessLinux
- CVE-2022-50721dmaengine: qcom-adm: fix wrong calling convention for prep_slave_sgLinux
- CVE-2022-50720x86/apic: Don't disable x2APIC if lockedLinux
- CVE-2022-50718drm/amdgpu: fix pci device refcount leakLinux
- CVE-2022-50716wifi: ar5523: Fix use-after-free on ar5523_cmd() timed outLinux
- CVE-2022-50715md/raid1: stop mdx_raid1 thread when raid1 array run failedLinux
- CVE-2022-50714wifi: mt76: mt7921e: fix rmmod crash in driver reload testLinux
- CVE-2022-50713clk: visconti: Fix memory leak in visconti_register_pll()Linux
- CVE-2022-50712devlink: hold region lock when flushing snapshotsLinux
- CVE-2025-68744bpf: Free special fields when update [lru_,]percpu_hash mapsLinux
- CVE-2025-68743mshv: Fix create memory region overlap checkLinux
- CVE-2025-68742bpf: Fix invalid prog->stats access when update_effective_progs failsLinux
- CVE-2025-68740ima: Handle error code returned by ima_filter_rule_match()Linux
- CVE-2025-68739PM / devfreq: hisi: Fix potential UAF in OPP handlingLinux
- CVE-2025-68738wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()Linux
- CVE-2025-68737arm64/pageattr: Propagate return value from __change_memory_commonLinux
- CVE-2025-68734isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()Linux
- CVE-2023-54041io_uring: fix memory leak when removing provided buffersLinux
- CVE-2023-54039can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory accessLinux
- CVE-2023-54038Bluetooth: hci_conn: return ERR_PTR instead of NULL when there is no linkLinux
- CVE-2023-54037ice: prevent NULL pointer deref during reloadLinux
- CVE-2023-54036wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EULinux
- CVE-2023-54034iommufd: Make sure to zero vfio_iommu_type1_info before copying to userLinux
- CVE-2023-54033bpf: fix a memory leak in the LRU and LRU_PERCPU hash mapsLinux
- CVE-2023-54032btrfs: fix race when deleting quota root from the dirty cow roots listLinux
- CVE-2023-54031vdpa: Add queue index attr to vdpa_nl_policy for nlattr length checkLinux
- CVE-2023-54030io_uring/net: don't overflow multishot recvLinux
- CVE-2023-54028RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task"Linux
- CVE-2023-54027iio: core: Prevent invalid memory access when there is no parentLinux
- CVE-2023-54025wifi: rsi: Do not configure WoWlan in shutdown hook if not enabledLinux
- CVE-2023-54024KVM: Destroy target device if coalesced MMIO unregistration failsLinux
- CVE-2023-54023btrfs: fix race between balance and cancel/pauseLinux
- CVE-2023-54022ALSA: usb-audio: Fix potential memory leaks at error path for UMP openLinux
- CVE-2023-54021ext4: set goal start correctly in ext4_mb_normalize_requestLinux
- CVE-2023-54020dmaengine: sf-pdma: pdma_desc memory leak fixLinux
- CVE-2023-54018drm/msm/hdmi: Add missing check for alloc_ordered_workqueueLinux
- CVE-2023-54017powerpc/pseries: fix possible memory leak in ibmebus_bus_init()Linux
- CVE-2023-54016wifi: ath12k: Fix memory leak in rx_desc and tx_descLinux
- CVE-2023-54015net/mlx5: Devcom, fix error flow in mlx5_devcom_register_deviceLinux
- CVE-2023-54014scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()Linux
- CVE-2023-54013interconnect: Fix locking for runpm vs reclaimLinux
- CVE-2023-54011scsi: mpi3mr: Fix an issue found by KASANLinux
- CVE-2023-54010ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objectsLinux
- CVE-2023-54009i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error pathLinux
- CVE-2023-54008virtio_vdpa: build affinity masks conditionallyLinux
- CVE-2023-54007vmci_host: fix a race condition in vmci_host_poll() causing GPFLinux
- CVE-2023-54006af_unix: Fix data-race around unix_tot_inflight.Linux
- CVE-2023-54005binder: fix memory leak in binder_init()Linux
- CVE-2023-54003RDMA/core: Fix GID entry ref leak when create_ah failsLinux
- CVE-2023-54002btrfs: fix assertion of exclop condition when starting balanceLinux
- CVE-2023-54001staging: r8712: Fix memory leak in _r8712_init_xmit_priv()Linux
- CVE-2023-54000net: hns3: fix deadlock issue when externel_lb and reset are executed togetherLinux
- CVE-2023-53999net/mlx5e: TC, Fix internal port memory leakLinux
- CVE-2023-53998hwrng: virtio - Fix race on data_avail and actual dataLinux
- CVE-2023-53995net: ipv4: fix one memleak in __inet_del_ifa()Linux
- CVE-2023-53994ionic: remove WARN_ON to prevent panic_on_warnLinux
- CVE-2023-53993PCI/DOE: Fix memory leak with CONFIG_DEBUG_OBJECTS=yLinux
- CVE-2023-53992wifi: cfg80211: ocb: don't leave if not joinedLinux
- CVE-2023-53991drm/msm/dpu: Disallow unallocated resources to be returnedLinux
- CVE-2023-53989arm64: mm: fix VA-range sanity checkLinux
- CVE-2023-53987ping: Fix potentail NULL deref for /proc/net/icmp.Linux
- CVE-2022-50711net: ethernet: mtk_eth_soc: fix possible memory leak in mtk_probe()Linux
- CVE-2022-50710ice: set tx_tstamps when creating new Tx rings via ethtoolLinux
- CVE-2022-50709wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()Linux
- CVE-2022-50708HSI: ssi_protocol: fix potential resource leak in ssip_pn_open()Linux
- CVE-2022-50707virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()Linux
- CVE-2022-50706net/ieee802154: don't warn zero-sized raw_sendmsg()Linux
- CVE-2022-50705io_uring/rw: defer fsnotify calls to task contextLinux
- CVE-2022-50704USB: gadget: Fix use-after-free during usb config switchLinux
- CVE-2022-50703soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()Linux
- CVE-2022-50702vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init()Linux
- CVE-2022-50699selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context()Linux
- CVE-2022-50698ASoC: da7219: Fix an error handling path in da7219_register_dai_clks()Linux
- CVE-2025-68733smack: fix bug: unprivileged task can create labelsLinux
- CVE-2025-68732gpu: host1x: Fix race in syncpt alloc/freeLinux
- CVE-2025-68731accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()Linux
- CVE-2025-68729wifi: ath12k: Fix MSDU buffer types handling in RX error pathLinux
- CVE-2025-68728ntfs3: fix uninit memory after failed mi_read in mi_format_newLinux
- CVE-2025-68727ntfs3: Fix uninit buffer allocated by __getname()Linux
- CVE-2025-68725bpf: Do not let BPF test infra emit invalid GSO types to stackLinux
- CVE-2025-68380wifi: ath11k: fix peer HE MCS assignmentLinux
- CVE-2025-68378bpf: Fix stackmap overflow check in __bpf_get_stackid()Linux
- CVE-2025-68377ns: initialize ns_list_node for initial namespacesLinux
- CVE-2025-68376coresight: ETR: Fix ETR buffer use-after-free issueLinux
- CVE-2025-68375perf/x86: Fix NULL event access and potential PEBS record lossLinux
- CVE-2025-68374md: fix rcu protection in md_wakeup_threadLinux
- CVE-2025-68373md: avoid repeated calls to del_gendiskLinux
- CVE-2025-68372nbd: defer config put in recv_workLinux
- CVE-2025-68371scsi: smartpqi: Fix device resources accessed after device removalLinux
- CVE-2025-68368md: init bioset in mddev_initLinux
- CVE-2025-68367macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouseLinux
- CVE-2025-68366nbd: defer config unlock in nbd_genl_connectLinux
- CVE-2025-68364ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()Linux
- CVE-2025-68363bpf: Check skb->transport_header is set in bpf_skb_check_mtuLinux
- CVE-2025-68362wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()Linux
- CVE-2025-68361erofs: limit the level of fs stacking for file-backed mountsLinux
- CVE-2025-68358btrfs: fix racy bitfield write in btrfs_clear_space_info_full()Linux
- CVE-2025-68357iomap: allocate s_dio_done_wq for async reads as wellLinux
- CVE-2025-68356gfs2: Prevent recursive memory reclaimLinux
- CVE-2025-68355bpf: Fix exclusive map memory leakLinux
- CVE-2025-68354regulator: core: Protect regulator_supply_alias_list with regulator_list_mutexLinux
- CVE-2025-68353net: vxlan: prevent NULL deref in vxlan_xmit_oneLinux
- CVE-2025-68351exfat: fix refcount leak in exfat_findLinux
- CVE-2025-68350exfat: fix divide-by-zero in exfat_allocate_bitmapLinux
- CVE-2025-68348block: fix memory leak in __blkdev_issue_zero_pagesLinux
- CVE-2025-68346ALSA: dice: fix buffer overflow in detect_stream_formats()Linux
- CVE-2025-68345ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()Linux
- CVE-2025-68344ALSA: wavefront: Fix integer overflow in sample size validationLinux
- CVE-2025-64641Mattermost Jira plugin crafted action leaks Jira issue detailsMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-13767Unauthorized Read Access to Private Channel Posts via Mattermost Jira PluginMattermost · github.com/mattermost/mattermost-server +3
- CVE-2025-57840Privilege Bypass in ADBHonor Magic OS
- CVE-2025-13407GravityForms < 2.9.23.1 - Unauthenticated Arbitrary File UploadGravity Forms
- CVE-2025-15053code-projects Student Information System searchresults.php sql injectioncode-projects Student Information System
- CVE-2025-15052code-projects Student Information System profile.php cross site scriptingcode-projects Student Information System
- CVE-2025-15050code-projects Student File Management System save_file.php unrestricted uploadcode-projects Student File Management System
- CVE-2024-35322MyNET up to v26.08 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the ficheiro parameter.
- CVE-2024-39037MyNET up to v26.08.316 was discovered to contain an Unauthenticated SQL Injection vulnerability via the intmenu parameter.
- CVE-2024-40317A reflected cross-site scripting (XSS) vulnerability in MyNET up to v26.08 allows attackers to execute arbitrary code in the context of a us
- CVE-2024-58335OpenXRechnungToolbox through 2024-10-05-3.0.0 before 6c50e89 allows XXE because the disallow-doctype-decl feature is not enabled in visualizjcthiele OpenXRechnungToolbox
- CVE-2025-60935An open redirect vulnerability in the login endpoint of Blitz Panel v1.17.0 allows attackers to redirect users to malicious domains via a cr