2025 CVEs (page 256)
Page 256 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-7365 | High | 7.1 | 2025-07-10 | A flaw was found in Keycloak. When an authenticated attacker attempts to merge accounts with another existing account during an identity provider (IdP) login… |
CVE-2025-46835 | High | 8.5 | 2025-07-10 | Git GUI allows you to use the Git source control management tools via a GUI. When a user clones an untrusted repository and is tricked into editing a file loca… |
CVE-2025-46334 | High | 8.6 | 2025-07-10 | Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter prog… |
CVE-2025-44251 | High | 7.5 | 2025-07-10 | Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process. |
CVE-2025-36090 | Medium | 4.3 | 2025-07-10 | IBM Analytics Content Hub 2.0, 2.1, 2.2, and 2.3 could allow a remote attacker to obtain information about the application framework which could be used in rec… |
CVE-2025-27614 | High | 8.6 | 2025-07-10 | Gitk is a Tcl/Tk based Git history browser. Starting with 2.41.0, a Git repository can be crafted in such a way that with some social engineering a user who ha… |
CVE-2025-27613 | Low | 3.6 | 2025-07-10 | Gitk is a Tcl/Tk based Git history browser. Starting with 1.7.0, when a user clones an untrusted repository and runs gitk without additional command arguments… |
CVE-2025-7425 | High | 7.8 | 2025-07-10 | A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as… |
CVE-2025-7424 | High | 7.5 | 2025-07-10 | A flaw was found in the libxslt library. The same memory field, psvi, is used for both stylesheet and input data, which can lead to type confusion during XML t… |
CVE-2025-7407 | Medium | 6.3 | 2025-07-10 | A vulnerability, which was classified as critical, was found in Netgear D6400 1.0.0.114. This affects an unknown part of the file diag.cgi. The manipulation of… |
CVE-2025-6211 | Medium | 6.5 | 2025-07-10 | A vulnerability in the DocugamiReader class of the run-llama/llama_index repository, up to version 0.12.28, involves the use of MD5 hashing to generate IDs for… |
CVE-2025-5040 | High | 7.8 | 2025-07-10 | A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerab… |
CVE-2025-5037 | High | 7.8 | 2025-07-10 | A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can leverage th… |
CVE-2025-32990 | Medium | 6.5 | 2025-07-10 | A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain sett… |
CVE-2025-6948 | High | 8.7 | 2025-07-10 | An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain c… |
CVE-2025-6168 | Low | 2.7 | 2025-07-10 | An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated maintaine… |
CVE-2025-5023 | High | 7.1 | 2025-07-10 | Use of Hard-coded Credentials vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA… |
CVE-2025-5022 | Medium | 6.5 | 2025-07-10 | Weak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system monitor “EcoGuideTAB” PV-DR004J all versions and PV-DR004JA all… |
CVE-2025-4972 | Low | 2.7 | 2025-07-10 | An issue has been discovered in GitLab EE affecting all versions from 18.0 before 18.0.4 and 18.1 before 18.1.2 that could have allowed authenticated users wit… |
CVE-2025-3396 | Medium | 4.3 | 2025-07-10 | An issue has been discovered in GitLab EE affecting all versions from 13.3 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that could have allowed a… |
CVE-2025-38348 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() Robert Morris reported: |… |
CVE-2025-38347 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on ino and xnid syzbot reported a f2fs bug as below: INFO… |
CVE-2025-38346 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix UAF when lookup kallsym after ftrace disabled The following issue happens wit… |
CVE-2025-38345 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi operand cache leak in dswstate.c ACPICA commit 987a3b5cf7175916e2a4b6ea5… |
CVE-2025-38344 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ACPICA: fix acpi parse and parseext cache leaks ACPICA commit 8829e70e1360c81e7a5a901b5d4… |
CVE-2025-38343 | High | 8.3 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: drop fragments with multicast or broadcast RA IEEE 802.11 fragmentati… |
CVE-2025-38342 | High | 7.0 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: software node: Correct a OOB check in software_node_get_reference_args() software_node_ge… |
CVE-2025-38341 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double free when failing to DMA-map FW msg The semantics are that calle… |
CVE-2025-38340 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test KASAN reported out of bounds a… |
CVE-2025-38339 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: powerpc/bpf: fix JIT code size calculation of bpf trampoline arch_bpf_trampoline_size() p… |
CVE-2025-38338 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() Sometimes, when a file was… |
CVE-2025-38337 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() Since handle->h_t… |
CVE-2025-38336 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 The controller has a hardware… |
CVE-2025-38335 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT When enabling PREEMPT_RT, the… |
CVE-2025-38334 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the p… |
CVE-2025-38333 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to bail out in get_new_segment() ------------[ cut here ]------------ WARNING… |
CVE-2025-38332 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggerin… |
CVE-2025-38331 | High | 7.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware acce… |
CVE-2025-38330 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache) KASAN reported out… |
CVE-2025-38329 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info) KASAN reported out… |
CVE-2025-38328 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2_prealloc_raw_node_refs() result in few other places Fuzzing hit anothe… |
CVE-2025-38327 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fgraph: Do not enable function_graph tracer when setting funcgraph-args When setting the… |
CVE-2025-38326 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: aoe: clean device rq_list in aoedev_downdev() An aoe device's rq_list contains accepted b… |
CVE-2025-38325 | Critical | 9.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: add free_transport ops in ksmbd connection free_transport function for tcp connect… |
CVE-2025-38324 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). As syzbot reported [0], mpls_… |
CVE-2025-38323 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: atm: add lec_mutex syzbot found its way in net/atm/lec.c, and found an error path in… |
CVE-2025-38322 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Fix crash in icl_update_topdown_event() The perf_fuzzer found a hard-lock… |
CVE-2025-38321 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when close_all_cached_dirs fails Under low-memory conditions, close_all… |
CVE-2025-38320 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() KASAN reports a… |
CVE-2025-38319 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table Th… |
CVE-2025-38318 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Fix missing platform_set_drvdata() Add missing platform_set_drvdata in arm_… |
CVE-2025-38317 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix buffer overflow in debugfs If the user tries to write more than 32 byte… |
CVE-2025-38316 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: avoid NULL pointer dereference in mt7996_set_monitor() The function m… |
CVE-2025-38315 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Check dsbr size from EFI variable Since the size of struct btintel_ds… |
CVE-2025-38314 | High | 7.3 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: virtio-pci: Fix result size returned for the admin command completion The result size ret… |
CVE-2025-38313 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix double-free on mc_dev The blamed commit tried to simplify how the deallo… |
CVE-2025-38312 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() In fb_find_mode_cvt(), iff mo… |
CVE-2025-38311 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: iavf: get rid of the crit lock Get rid of the crit lock. That frees us from the error pro… |
CVE-2025-38310 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: seg6: Fix validation of nexthop addresses The kernel currently validates that the length… |
CVE-2025-38309 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: move xe_svm_init() earlier In xe_vm_close_and_put() we need to be able to call… |
CVE-2025-38308 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw Search result of avs_dai_fi… |
CVE-2025-38307 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parse_int_array() The first element of the r… |
CVE-2025-38306 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fs/fhandle.c: fix a race in call of has_locked_children() may_decode_fh() is calling has_… |
CVE-2025-38305 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() There is no disagreement th… |
CVE-2025-38304 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix NULL pointer deference on eir_get_service_data The len parameter is consid… |
CVE-2025-38303 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix possible crashes on eir_create_adv_data eir_create_adv_data may attem… |
CVE-2025-38302 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work Bios queued up in t… |
CVE-2025-38301 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: unbreak driver after cleanup Commit 29be47fcd6a0 ("nvmem: zynqmp_nvm… |
CVE-2025-38300 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() Fix two DMA cle… |
CVE-2025-38299 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() ETDM2_IN_BE and ETDM1_OUT_BE a… |
CVE-2025-38298 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which automatical… |
CVE-2025-38297 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of… |
CVE-2025-38296 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: ACPI: platform_profile: Avoid initializing on non-ACPI platforms The platform profile dri… |
CVE-2025-38295 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_crea… |
CVE-2025-38294 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL access in assign channel context handler Currently, when ath12k_ma… |
CVE-2025-38293 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix node corruption in ar->arvifs list In current WLAN recovery code flow… |
CVE-2025-38292 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix invalid access to memory In ath12k_dp_rx_msdu_coalesce(), rxcb is fetch… |
CVE-2025-38291 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, w… |
CVE-2025-38290 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix node corruption in ar->arvifs list In current WLAN recovery code flow… |
CVE-2025-38289 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk Smatch detected a… |
CVE-2025-38288 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels Correct kernel… |
CVE-2025-38287 | High | 7.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can… |
CVE-2025-38286 | High | 7.1 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91: Fix possible out-of-boundary access at91_gpio_probe() doesn't check that g… |
CVE-2025-38285 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: CPU: 3 PID… |
CVE-2025-38284 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: configure manual DAC mode via PCI config API only To support 36-bit DMA… |
CVE-2025-38283 | High | 8.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: hisi_acc_vfio_pci: bugfix live migration function without VF device driver If the VF devi… |
CVE-2025-38282 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: kernfs: Relax constraint in draining guard The active reference lifecycle provides the br… |
CVE-2025-38281 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init devm_kasprintf() can return a N… |
CVE-2025-38280 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid __bpf_prog_ret0_warn when jit fails syzkaller reported an issue: WARNING: CPU… |
CVE-2025-38279 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: bpf: Do not include stack ptr register in precision backtracking bookkeeping Yi Lai repor… |
CVE-2025-38278 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback This patch addresses below issu… |
CVE-2025-38277 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: mtd: nand: ecc-mxic: Fix use of uninitialized variable ret If ctx->steps is zero, the loo… |
CVE-2025-38276 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fs/dax: Fix "don't skip locked entries when scanning entries" Commit 6be3e21d25ca ("fs/da… |
CVE-2025-38275 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug The qmp_usb_iomap() helper function curren… |
CVE-2025-38274 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() fpga_mgr_test_img_… |
CVE-2025-38273 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: tipc: fix refcount warning in tipc_aead_encrypt syzbot reported a refcount warning [… |
CVE-2025-38272 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: b53: do not enable EEE on bcm63xx BCM63xx internal switches do not support EEE… |
CVE-2025-38271 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnl_create_link() At the time rtnl_create_link() is running… |
CVE-2025-38270 | High | 7.8 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from netpoll netdevsim supports netpoll. Make… |
CVE-2025-38269 | Medium | 5.5 | 2025-07-10 | In the Linux kernel, the following vulnerability has been resolved: btrfs: exit after state insertion failure at btrfs_convert_extent_bit() If insert_state()… |