2025 CVEs (page 240)
Page 240 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-38417 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ice: fix eswitch code memory leak in reset scenario Add simple eswitch mode checker in at… |
CVE-2025-38416 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: uart: Set tty->disc_data only in success path Setting tty->disc_data before ope… |
CVE-2025-38415 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: check return result of sb_min_blocksize Syzkaller reports an "UBSAN: shift-out-… |
CVE-2025-38414 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 GCC_GCC_PCIE_HOT_RST is wro… |
CVE-2025-38413 | High | 7.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length check When calling buf_to_xdp, the len argume… |
CVE-2025-38412 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retr… |
CVE-2025-38411 | Critical | 9.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it wi… |
CVE-2025-38410 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix a fence leak in submit error path In error paths, we could unref the submit… |
CVE-2025-38409 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix another leak in the submit error path put_unused_fd() doesn't free the insta… |
CVE-2025-38408 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: genirq/irq_sim: Initialize work context pointers properly Initialize `ops` member's point… |
CVE-2025-38407 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: riscv: cpu_ops_sbi: Use static array for boot_data Since commit 6b9f29b81b15 ("riscv: Ena… |
CVE-2025-38406 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: remove WARN on bad firmware input If the firmware gives bad input, that's n… |
CVE-2025-38405 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix memory leak of bio integrity If nvmet receives commands with metadata there is… |
CVE-2025-38404 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: displayport: Fix potential deadlock The deadlock can occur due to a recursive… |
CVE-2025-38403 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: Clear the vmci transport packet properly when initializing it In vmci_transpo… |
CVE-2025-8157 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3. It has been classified as critical. This affects an unknown part of… |
CVE-2025-8156 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3 and classified as critical. Affected by this issue is some unknown fu… |
CVE-2025-51411 | Medium | 6.1 | 2025-07-25 | A reflected cross-site scripting (XSS) vulnerability exists in Institute-of-Current-Students v1.0 via the email parameter in the /postquerypublic endpoint. The… |
CVE-2025-43712 | Low | 2.9 | 2025-07-25 | JHipster before v.8.9.0 allows privilege escalation via a modified authorities parameter. Upon registering in the JHipster portal and logging in as a standard… |
CVE-2025-38402 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function retu… |
CVE-2025-38401 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mtk-sd: Prevent memory corruption from DMA map failure If msdc_prepare_data() fails to ma… |
CVE-2025-38400 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. syzbot reported a warn… |
CVE-2025-38399 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() The functio… |
CVE-2025-38398 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: reallocate BAM transactions Using the mtd_nandbiterrs module for tes… |
CVE-2025-38397 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix suspicious RCU usage warning When I run the NVME over TCP test in vir… |
CVE-2025-38396 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass Export anon_inode_… |
CVE-2025-38395 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is suppo… |
CVE-2025-38394 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix memory corruption of input_handler_list In appletb_kbd_probe an inp… |
CVE-2025-38393 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN We found a few different systems hung… |
CVE-2025-38392 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2_CAP_MACFILTER enabled, the… |
CVE-2025-38391 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmodes/displayport: do not index invalid pin_assignments A poorly implement… |
CVE-2025-38390 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix memory leak by freeing notifier callback node Commit e0573444edbf… |
CVE-2025-38389 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been repor… |
CVE-2025-38388 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current… |
CVE-2025-38387 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert The obj_event may be loade… |
CVE-2025-38386 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: Refuse to evaluate a method if arguments are missing As reported in [1], a platfo… |
CVE-2025-38385 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Remove redundant net… |
CVE-2025-38384 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf… |
CVE-2025-38383 | Medium | 4.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in show_numa_info() The following data-race was found in show_n… |
CVE-2025-38382 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix iteration of extrefs during log replay At __inode_add_ref() when processing ex… |
CVE-2025-38381 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() The cs40l50… |
CVE-2025-38379 | High | 7.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_re… |
CVE-2025-38378 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe In probe appletb_kbd_p… |
CVE-2025-38377 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose… |
CVE-2025-38376 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume Shawn and John… |
CVE-2025-38375 | High | 8.4 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_pa… |
CVE-2025-38374 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-TEE driver registers the function notif_ca… |
CVE-2025-38373 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix potential deadlock in MR deregistration The issue arises when kzalloc() is i… |
CVE-2025-38372 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling __xa_store() and __xa_erase(… |
CVE-2025-38371 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Disable interrupts before resetting the GPU Currently, an interrupt can be trigg… |
CVE-2025-38370 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactions If we are rebui… |
CVE-2025-38369 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using … |
CVE-2025-38368 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() The returned value, pf… |
CVE-2025-38367 | High | 8.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused… |
CVE-2025-38366 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Check validity of "num_cpu" from user space The maximum supported cpu num… |
CVE-2025-38365 | Critical | 9.1 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race between a rename a… |
CVE-2025-38364 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() Temporarily clear the preallo… |
CVE-2025-38363 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fix a possible null pointer dereference In tegra_crtc_reset(), new memory is a… |
CVE-2025-38362 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check for get_first_active_display() The function mod_h… |
CVE-2025-38361 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check dce_hwseq before dereferencing it [WHAT] hws was checked for null… |
CVE-2025-38360 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees [WHY] For non-zero DSC ins… |
CVE-2025-38359 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix in_atomic() handling in do_secure_storage_access() Kernel user spaces access… |
CVE-2025-38358 | Medium | 4.7 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between async reclaim worker and close_ctree() Syzbot reported an asserti… |
CVE-2025-38357 | High | 7.8 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: fuse: fix runtime warning on truncate_folio_batch_exceptionals() The WARN_ON_ONCE is intr… |
CVE-2025-38356 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Explicitly exit CT safe mode on unwind During driver probe we might be briefl… |
CVE-2025-38355 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Process deferred GGTT node removals on device unwind While we are indirectly drai… |
CVE-2025-38354 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediately during boot There is a small chanc… |
CVE-2025-38353 | Medium | 5.5 | 2025-07-25 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix taking invalid lock on wedge If device wedges on e.g. GuC upload, the submiss… |
CVE-2025-8155 | Low | 3.5 | 2025-07-25 | A vulnerability has been found in D-Link DCS-6010L 1.15.03 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2025-5254 | Medium | 6.1 | 2025-07-25 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kron Technologies Kron PAM allows Stored XSS. Thi… |
CVE-2025-5253 | Medium | 6.5 | 2025-07-25 | Allocation of Resources Without Limits or Throttling vulnerability in Kron Technologies Kron PAM allows HTTP DoS. This issue affects Kron PAM: before 3.7. |
CVE-2025-8183 | High | 7.5 | 2025-07-25 | NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS |
CVE-2025-8140 | High | 8.8 | 2025-07-25 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm… |
CVE-2025-8139 | High | 8.8 | 2025-07-25 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPort… |
CVE-2025-8138 | High | 8.8 | 2025-07-25 | A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /… |
CVE-2025-8137 | High | 8.8 | 2025-07-25 | A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2025-8136 | High | 8.8 | 2025-07-25 | A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the file /boafrm/formFi… |
CVE-2025-8135 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, has been found in itsourcecode Insurance Management System 1.0. This issue affects some unknown processing o… |
CVE-2025-5835 | High | 8.8 | 2025-07-25 | The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_post_apis() functio… |
CVE-2025-5831 | High | 8.8 | 2025-07-25 | The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all ve… |
CVE-2025-8134 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdate… |
CVE-2025-8133 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical has been found in yanyutao0402 ChanCMS up to 3.1.2. This affects the function getArticle of the file app/modules/api/ser… |
CVE-2025-7022 | Medium | 6.1 | 2025-07-25 | The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C… |
CVE-2025-8132 | Medium | 5.4 | 2025-07-25 | A vulnerability was found in yanyutao0402 ChanCMS up to 3.1.2. It has been rated as critical. Affected by this issue is the function delfile of the file app/ex… |
CVE-2025-8131 | High | 8.8 | 2025-07-25 | A vulnerability was found in Tenda AC20 16.03.08.05. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2025-8129 | Low | 3.5 | 2025-07-25 | A vulnerability, which was classified as problematic, was found in KoaJS Koa up to 3.0.0. Affected is the function back in the library lib/response.js of the c… |
CVE-2025-8128 | Medium | 6.3 | 2025-07-25 | A vulnerability, which was classified as critical, has been found in zhousg letao up to 7d8df0386a65228476290949e0413de48f7fbe98. This issue affects some unkno… |
CVE-2025-8127 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. This vulnerability affects unknown code of the file /system/user/list. The ma… |
CVE-2025-54568 | Low | 3.7 | 2025-07-25 | Akamai Rate Control alpha before 2025 allows attackers to send requests above the stipulated thresholds because the rate is measured separately for each edge n… |
CVE-2025-8126 | Medium | 6.3 | 2025-07-25 | A vulnerability classified as critical has been found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/user/export. The manipu… |
CVE-2025-54567 | Medium | 4.2 | 2025-07-25 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327. |
CVE-2025-54566 | Medium | 4.2 | 2025-07-25 | hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327. |
CVE-2025-8125 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sys… |
CVE-2025-54558 | Medium | 4.1 | 2025-07-25 | OpenAI Codex CLI before 0.9.0 auto-approves ripgrep (aka rg) execution even with the --pre or --hostname-bin or --search-zip or -z flag. |
CVE-2025-0253 | Low | 2.0 | 2025-07-25 | HCL IEM is affected by a cookie attribute not set vulnerability due to inconsistency of certain security-related configurations which could increase exposure t… |
CVE-2025-0252 | Low | 2.6 | 2025-07-25 | HCL IEM is affected by a password in cleartext vulnerability. Sensitive information is transmitted without adequate protection, potentially exposing it to una… |
CVE-2025-0251 | Low | 2.6 | 2025-07-25 | HCL IEM is affected by a concurrent login vulnerability. The application allows multiple concurrent sessions using the same user credentials, which may introd… |
CVE-2025-8124 | Medium | 6.3 | 2025-07-25 | A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-7742 | | 2025-07-25 | An authentication vulnerability exists in the LG Innotek camera model LNV5110R firmware that allows a malicious actor to upload an HTTP POST request to the dev… | |
CVE-2025-0250 | Low | 2.2 | 2025-07-25 | HCL IEM is affected by an authorization token sent in cookie vulnerability. A token used for authentication and authorization is being handled in a manner tha… |