2025 CVEs (page 309)
Page 309 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-37959 | Critical | 9.4 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used to redirect packets… |
CVE-2025-37958 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concu… |
CVE-2025-37957 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit ed129ec9057… |
CVE-2025-37956 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd ser… |
CVE-2025-37955 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to o… |
CVE-2025-37954 | High | 7.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing valid cfid re… |
CVE-2025-37953 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_deactivate() idempotent Alan reported a NULL pointer dereference in htb… |
CVE-2025-37952 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destr… |
CVE-2025-37951 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job times out, we… |
CVE-2025-37950 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages… |
CVE-2025-37949 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the… |
CVE-2025-37948 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program… |
CVE-2025-37947 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() di… |
CVE-2025-37946 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit… |
CVE-2025-37945 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DS… |
CVE-2025-37944 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process Currently, ath12k_dp_… |
CVE-2025-37943 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi In certain cases, h… |
CVE-2025-37941 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_… |
CVE-2025-37940 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large nu… |
CVE-2025-37939 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext core_relo header Update btf_ext_parse_info() to ensure the… |
CVE-2025-37938 | High | 7.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the forma… |
CVE-2025-37937 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000_set_dds()… |
CVE-2025-37936 | High | 8.7 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. When generating… |
CVE-2025-37935 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function det… |
CVE-2025-37934 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction Actually ch… |
CVE-2025-37933 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat message… |
CVE-2025-37932 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_qlen_notify() idempotent htb_qlen_notify() always deactivates the HTB c… |
CVE-2025-37931 | High | 7.3 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize When running machines with 64k page s… |
CVE-2025-37930 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a… |
CVE-2025-37929 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays Commit a5951389e58d ("arm… |
CVE-2025-37928 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIG_DEBUG_… |
CVE-2025-37927 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid There is a string parsing… |
CVE-2025-37926 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race c… |
CVE-2025-37924 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introd… |
CVE-2025-37923 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix oob write in trace_seq_to_buffer() syzbot reported this bug: ===============… |
CVE-2025-37922 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: book3s64/radix : Align section vmemmap start address to PAGE_SIZE A vmemmap altmap is a d… |
CVE-2025-37921 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted from a… |
CVE-2025-37920 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path Move rx_lock from xsk_socket to xsk_buf… |
CVE-2025-37919 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot Update chip data using dev… |
CVE-2025-37918 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() A NULL pointer derefere… |
CVE-2025-37917 | High | 7.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spin_lock_i… |
CVE-2025-37916 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error popped up in stress… |
CVE-2025-37915 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: drr: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37914 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37913 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Ge… |
CVE-2025-37912 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() As mentioned in the commit baeb… |
CVE-2025-37911 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix out-of-bound memcpy() during ethtool -w When retrieving the FW coredump usin… |
CVE-2025-37910 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations On Adva boards, SMA sys… |
CVE-2025-37909 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: Fix memleak issue when GSO enabled Always map the `skb` to the LS descripto… |
CVE-2025-37908 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm, slab: clean up slab->obj_exts always When memory allocation profiling is disabled at… |
CVE-2025-37907 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix locking order in ivpu_job_submit Fix deadlock in job submission and abort… |
CVE-2025-37906 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd ublk_cancel_cmd(… |
CVE-2025-37905 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Balance device refcount when destroying devices Using device_find_chi… |
CVE-2025-37904 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfs_iget() [BUG] There is a bug report that a syzbot repro… |
CVE-2025-37903 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free in hdcp The HDCP code in amdgpu_dm_hdcp.c copies… |
CVE-2025-37901 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs On Qualcomm chipsets… |
CVE-2025-37900 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu: Fix two issues in iommu_copy_struct_from_user() In the review for iommu_copy_struc… |
CVE-2025-37899 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use… |
CVE-2025-37898 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix module loading without patchable function entries get_stubs_size as… |
CVE-2025-37897 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release plfxlc_mac_release() asserts… |
CVE-2025-37896 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: spi: spi-mem: Add fix to avoid divide error For some SPI flash memory operations, dummy b… |
CVE-2025-37895 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix error handling path in bnxt_init_chip() WARN_ON() is triggered in __flush_wo… |
CVE-2025-37894 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: use sock_gen_put() when sk_state is TCP_TIME_WAIT It is possible for a pointer of ty… |
CVE-2025-41228 | Medium | 4.3 | 2025-05-20 | VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due to improper input validation. A malicious actor with network access t… |
CVE-2025-41227 | Medium | 5.5 | 2025-05-20 | VMware ESXi, Workstation, and Fusion contain a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileg… |
CVE-2025-41226 | Medium | 6.8 | 2025-05-20 | VMware ESXi contains a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM… |
CVE-2025-41225 | High | 8.8 | 2025-05-20 | The vCenter Server contains an authenticated command-execution vulnerability. A malicious actor with privileges to create or modify alarms and run script actio… |
CVE-2025-26086 | High | 7.5 | 2025-05-20 | An unauthenticated blind SQL injection vulnerability exists in RSI Queue Management System v3.0 within the TaskID parameter of the get request handler. Attacke… |
CVE-2025-4980 | Medium | 5.3 | 2025-05-20 | A vulnerability has been found in Netgear DGND3700 1.1.00.15_1.00.15NA and classified as problematic. This vulnerability affects unknown code of the file /curr… |
CVE-2025-47941 | High | 7.2 | 2025-05-20 | TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS… |
CVE-2025-47940 | High | 7.2 | 2025-05-20 | TYPO3 is an open source, PHP based web content management system. Starting in version 10.0.0 and prior to versions 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, and… |
CVE-2025-47939 | Medium | 5.4 | 2025-05-20 | TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backend user interface has historically allo… |
CVE-2025-47938 | Low | 3.8 | 2025-05-20 | TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4… |
CVE-2025-47937 | Low | 3.7 | 2025-05-20 | TYPO3 is an open source, PHP based web content management system. Starting in version 9.0.0 and prior to versions 9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4… |
CVE-2025-47936 | Low | 3.3 | 2025-05-20 | TYPO3 is an open source, PHP based web content management system. In versions on the 12.x branch prior to 12.4.31 LTS and the 13.x branch prior to 13.4.2 LTS… |
CVE-2025-45862 | Medium | 6.5 | 2025-05-20 | TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the interfacenameds parameter in the formDhcpv6s interface. |
CVE-2025-4978 | Critical | 9.8 | 2025-05-20 | A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.ht… |
CVE-2025-4977 | Medium | 5.3 | 2025-05-20 | A vulnerability, which was classified as problematic, has been found in Netgear DGND3700 1.1.00.15_1.00.15NA. Affected by this issue is some unknown functional… |
CVE-2025-41231 | High | 7.3 | 2025-05-20 | VMware Cloud Foundation contains a missing authorisation vulnerability. A malicious actor with access to VMware Cloud Foundation appliance may be able to perfo… |
CVE-2025-41230 | High | 7.5 | 2025-05-20 | VMware Cloud Foundation contains an information disclosure vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may expl… |
CVE-2025-41229 | High | 8.2 | 2025-05-20 | VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443 on VMware Cloud Foundation may exploit… |
CVE-2025-40635 | | 2025-05-20 | SQL injection vulnerability in Comerzzia Backoffice: Sales Orchestrator 3.0.15. This vulnerability allows an attacker to retrieve, create, update and delete da… | |
CVE-2025-30193 | High | 7.5 | 2025-05-20 | In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can c… |
CVE-2025-40634 | | 2025-05-20 | Stack-based buffer overflow vulnerability in the 'conn-indicator' binary running as root on the TP-Link Archer AX50 router, in firmware versions prior to 1.0.1… | |
CVE-2025-40633 | | 2025-05-20 | A Stored Cross-Site Scripting (XSS) vulnerability has been found in Koibox for versions prior to e8cbce2. This vulnerability allows an authenticated attacker… | |
CVE-2025-37892 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: mtd: inftlcore: Add error check for inftl_read_oob() In INFTL_findwriteunit(), the return… |
CVE-2025-4951 | Medium | 4.6 | 2025-05-20 | Editions of Rapid7 AppSpider Pro before version 7.5.018 is vulnerable to a stored cross-site scripting vulnerability in the "ScanName" field. Despite the appli… |
CVE-2025-4322 | Critical | 9.8 | 2025-05-20 | The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the them… |
CVE-2025-2929 | High | 7.1 | 2025-05-20 | The Order Delivery Date WordPress plugin before 12.4.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected C… |
CVE-2025-4971 | | 2025-05-20 | Broadcom Automic Automation Agent Unix versions < 24.3.0 HF4 and < 21.0.13 HF1 allow low privileged users who have execution rights on the agent executable to… | |
CVE-2025-3079 | High | 8.7 | 2025-05-20 | A passback vulnerability which relates to office/small office multifunction printers and laser printers. |
CVE-2025-3078 | High | 8.7 | 2025-05-20 | A passback vulnerability which relates to production printers and office multifunction printers. |
CVE-2025-1308 | | 2025-05-19 | A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions. | |
CVE-2025-48340 | Critical | 9.8 | 2025-05-19 | Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager user-profile-meta allows Privilege Escalation.This issue affects User P… |
CVE-2025-3223 | Medium | 5.9 | 2025-05-19 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova WorkstationST on Windows (EGD Configuration Server m… |
CVE-2025-47949 | High | 7.5 | 2025-05-19 | samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to fo… |
CVE-2025-47946 | Medium | 6.1 | 2025-05-19 | Symfony UX is an initiative and set of libraries to integrate JavaScript tools into applications. Prior to version 2.25.1, rendering `{{ attributes }}` or usin… |
CVE-2025-47944 | High | 7.5 | 2025-05-19 | Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.0 a… |
CVE-2025-47935 | High | 7.5 | 2025-05-19 | Multer is a node.js middleware for handling `multipart/form-data`. Versions prior to 2.0.0 are vulnerable to a resource exhaustion and memory leak issue due to… |
CVE-2025-46441 | Medium | 5.3 | 2025-05-19 | Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <=… |