2025 CVEs (page 130)
Page 130 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-61106 | High | 7.5 | 2025-10-28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vu… |
CVE-2025-61104 | High | 7.5 | 2025-10-28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerab… |
CVE-2025-61103 | High | 7.5 | 2025-10-28 | FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This… |
CVE-2025-61043 | Critical | 9.1 | 2025-10-28 | An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue… |
CVE-2025-36085 | Medium | 5.4 | 2025-10-28 | IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized req… |
CVE-2025-36083 | Medium | 6.2 | 2025-10-28 | IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap memory before… |
CVE-2025-36081 | Medium | 5.3 | 2025-10-28 | IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input. |
CVE-2025-34318 | | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… | |
CVE-2025-34317 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34316 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34315 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34314 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34313 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34312 | High | 8.8 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands a… |
CVE-2025-34311 | High | 8.8 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a command injection vulnerability that allows an authenticated attacker to execute arbitrary commands a… |
CVE-2025-34310 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34309 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34308 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34307 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34306 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34305 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain multiple stored cross-site scripting (XSS) vulnerabilities caused by a bug in the cleanhtml() function… |
CVE-2025-34304 | Medium | 6.5 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated attacker to manipulate the SQL query used wh… |
CVE-2025-34303 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34302 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-34301 | Medium | 5.4 | 2025-10-28 | IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbit… |
CVE-2025-53855 | High | 7.8 | 2025-10-28 | An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to… |
CVE-2025-53814 | High | 7.8 | 2025-10-28 | A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-bas… |
CVE-2025-12390 | Medium | 6.0 | 2025-10-28 | A flaw was found in Keycloak. In Keycloak where a user can accidentally get access to another user's session if both use the same device and browser. This happ… |
CVE-2025-12380 | Critical | 9.8 | 2025-10-28 | Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC c… |
CVE-2025-12103 | Medium | 5.0 | 2025-10-28 | A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, wat… |
CVE-2025-1038 | | 2025-10-28 | The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authenticated user with high… | |
CVE-2025-1037 | | 2025-10-28 | By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands can enable access v… | |
CVE-2025-1036 | | 2025-10-28 | Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access f… | |
CVE-2025-9313 | | 2025-10-28 | An unauthenticated user can connect to a publicly accessible database using arbitrary credentials. The system grants full access to the database by leveraging… | |
CVE-2025-40082 | High | 7.1 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() BUG: KASAN: slab-out-of-bounds… |
CVE-2025-40081 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: perf: arm_spe: Prevent overflow in PERF_IDX2OFF() Cast nr_pages to unsigned long to avoid… |
CVE-2025-40080 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds… | |
CVE-2025-40079 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: riscv, bpf: Sign extend struct ops return values properly The ns_bpf_qdisc selftest trigg… |
CVE-2025-40078 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the f… | |
CVE-2025-40077 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid overflow while left shift operation Should cast type of folio->index f… | |
CVE-2025-40076 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-host: Pass proper IRQ domain to generic_handle_domain_irq() Starting with commi… | |
CVE-2025-40075 | High | 8.1 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: use dst_dev_net_rcu() Replace three dst_dev() with a lockdep enabled helper. |
CVE-2025-40074 | Critical | 9.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dst_dev_rcu() Change icmpv4_xrlim_allow(), ip_defrag() to prevent possi… |
CVE-2025-40073 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Do not validate SSPP when it is not ready Current code will validate current pla… | |
CVE-2025-40072 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: fanotify: Validate the return value of mnt_ns_from_dentry() before dereferencing The func… | |
CVE-2025-40071 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue() processes incomi… | |
CVE-2025-40070 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commi… | |
CVE-2025-40069 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix obj leak in VM_BIND error path If we fail a handle-lookup part way thru, we… |
CVE-2025-40068 | High | 8.4 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: Fix integer overflow in run_unpack() The MFT record relative to the file being… |
CVE-2025-40067 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation r… |
CVE-2025-40066 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() In orde… | |
CVE-2025-40065 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Write hgatp register with valid mode bits According to the RISC-V Privileged… | |
CVE-2025-40064 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net… |
CVE-2025-40063 | High | 7.0 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: comp - Use same definition of context alloc and free ops In commit 42d9f6c77479 (… |
CVE-2025-40062 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the initialization of qm->… | |
CVE-2025-40061 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in do_task() when draining When do_task() exhausts its iteration budge… |
CVE-2025-40060 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: coresight: trbe: Return NULL pointer for allocation failures When the TRBE driver fails t… | |
CVE-2025-40059 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: coresight: Fix incorrect handling for return value of devm_kzalloc The return value of de… | |
CVE-2025-40058 | High | 8.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on… |
CVE-2025-40057 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: ptp: Add a upper bound on max_vclocks syzbot reported WARNING in max_vclocks_store. This… | |
CVE-2025-40056 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check The return value of copy_to_iter can't… | |
CVE-2025-40055 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->c… | |
CVE-2025-40054 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix UAF issue in f2fs_merge_page_bio() As JY reported in bugzilla [1], Unable to h… |
CVE-2025-40053 | High | 7.5 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: net: dlink: handle copy_thresh allocation failure The driver did not handle failure of `n… |
CVE-2025-40052 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory The crypto API, through the scatterl… | |
CVE-2025-40051 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Modify the return value check The return value of copy_from_iter and copy_… |
CVE-2025-40050 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: bpf: Skip scalar adjustment for BPF_NEG if dst is a pointer In check_alu_op(), the verifi… | |
CVE-2025-40049 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-valu… | |
CVE-2025-40048 | High | 7.5 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask Remove the logic to set interru… |
CVE-2025-40047 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: always prune wait queue entry in io_waitid_wait() For a successful retur… |
CVE-2025-40046 | High | 8.6 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix overshooting recv limit It's reported that sometimes a zcrx request ca… |
CVE-2025-40045 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set the comp soundwire port correctly For some reason we endup wit… |
CVE-2025-40044 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descrip… |
CVE-2025-40043 | High | 8.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized… |
CVE-2025-40042 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference The… | |
CVE-2025-40041 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Sign-extend struct ops return values properly The ns_bpf_qdisc selftest t… |
CVE-2025-40040 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following cras… |
CVE-2025-40039 | High | 8.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix race condition in RPC handle list access The 'sess->rpc_handle_list' XArray ma… |
CVE-2025-40038 | High | 7.1 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid Skip the WRMSR and H… |
CVE-2025-40037 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: fbdev: simplefb: Fix use after free in simplefb_detach_genpds() The pm_domain cleanup can… | |
CVE-2025-40036 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cau… | |
CVE-2025-40035 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effe… | |
CVE-2025-40034 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() When platform firmware supplie… | |
CVE-2025-40033 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() pru_rpr… | |
CVE-2025-40032 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dm… | |
CVE-2025-40031 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: tee: fix register_shm_helper() In register_shm_helper(), fix incorrect error handling for… | |
CVE-2025-40030 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract… | |
CVE-2025-40029 | | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() return… | |
CVE-2025-55758 | Medium | 5.4 | 2025-10-28 | Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered. |
CVE-2025-41090 | | 2025-10-28 | microCLAUDIA in v3.2.0 and prior has an improper access control vulnerability. This flaw allows an authenticated user to perform unauthorized actions on other… | |
CVE-2025-40028 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: binder: fix double-free in dbitmap A process might fail to allocate a new bitmap when try… |
CVE-2025-40027 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASAN issue as below: … |
CVE-2025-40026 | High | 7.9 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O When completing emu… |
CVE-2025-40025 | High | 7.8 | 2025-10-28 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer for non inode dnode As syzbot reported below… |
CVE-2025-10151 | | 2025-10-28 | Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLin… | |
CVE-2025-10150 | | 2025-10-28 | Webserver crash caused by scanning on TCP port 80 in Softing Industrial Automation GmbH gateways and switch.This issue affects smartLink HW-PN: from 1.02 thro… | |
CVE-2025-12378 | High | 7.3 | 2025-10-28 | A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addproduct.php. P… |
CVE-2025-11735 | High | 7.5 | 2025-10-28 | The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the `phrase` parameter in all versions u… |
CVE-2025-62777 | High | 8.8 | 2025-10-28 | Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to log in to the affect… |
CVE-2025-10939 | Low | 3.7 | 2025-10-28 | A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occur… |