2025 CVEs (page 310)
Page 310 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-44893 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ruleNamekey parameter in the web_acl_mgmt_Rules_Apply_post function. |
CVE-2025-44890 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the host_ip parameter in the web_snmp_notifyv3_add_post function. |
CVE-2025-44888 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the stp_conf_name parameter in the web_stp_globalSetting_post function. |
CVE-2025-44887 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the radIpkey parameter in the web_radiusSrv_post function. |
CVE-2025-44886 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function. |
CVE-2025-44885 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_post function. |
CVE-2025-44884 | Critical | 9.8 | 2025-05-20 | FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the web_sys_infoContact_post function. |
CVE-2025-44881 | Critical | 9.8 | 2025-05-20 | A command injection vulnerability in the component /cgi-bin/qos.cgi of Wavlink WL-WN579A3 v1.0 allows attackers to execute arbitrary commands via a crafted inp… |
CVE-2025-4996 | Low | 2.4 | 2025-05-20 | A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Ad… |
CVE-2025-47290 | Medium | 5.9 | 2025-05-20 | containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an ima… |
CVE-2025-4364 | | 2025-05-20 | The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain admin… | |
CVE-2025-48391 | High | 7.7 | 2025-05-20 | In JetBrains YouTrack before 2025.1.76253 deletion of issues was possible due to missing permission checks in API |
CVE-2025-47854 | Medium | 4.3 | 2025-05-20 | In JetBrains TeamCity before 2025.03.2 open redirect was possible on editing VCS Root page |
CVE-2025-47853 | Medium | 4.8 | 2025-05-20 | In JetBrains TeamCity before 2025.03.2 stored XSS via Jira integration was possible |
CVE-2025-47852 | Medium | 4.8 | 2025-05-20 | In JetBrains TeamCity before 2025.03.2 stored XSS via YouTrack integration was possible |
CVE-2025-47851 | Medium | 4.8 | 2025-05-20 | In JetBrains TeamCity before 2025.03.2 stored XSS via GitHub Checks Webhook was possible |
CVE-2025-47850 | Medium | 4.3 | 2025-05-20 | In JetBrains YouTrack before 2025.1.74704 restricted attachments could become visible after issue cloning |
CVE-2025-47277 | Critical | 9.8 | 2025-05-20 | vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the `… |
CVE-2025-46725 | Critical | 9.8 | 2025-05-20 | Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() throu… |
CVE-2025-46724 | Critical | 9.8 | 2025-05-20 | Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fe… |
CVE-2025-37991 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash… |
CVE-2025-37990 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcm… |
CVE-2025-37989 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memor… |
CVE-2025-37988 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() Normally do_lock_mo… |
CVE-2025-37987 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core's adminq is prote… |
CVE-2025-37986 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers on partner unregistration To avoid usin… |
CVE-2025-37985 | Medium | 4.7 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing WDM_WWAN_IN_USE mus… |
CVE-2025-37984 | High | 7.0 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() Herbert notes that DIV… |
CVE-2025-37983 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry... this one had bee… |
CVE-2025-22157 | High | 8.8 | 2025-05-20 | This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Core Data Center and Se… |
CVE-2025-44084 | Critical | 9.8 | 2025-05-20 | D-link DI-8100 16.07.26A1 is vulnerable to Command Injection. An attacker can exploit this vulnerability by crafting specific HTTP requests, triggering the com… |
CVE-2025-37982 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost wh… |
CVE-2025-37981 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump The smartpqi driver checks the r… |
CVE-2025-37980 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fail… |
CVE-2025-37979 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5… |
CVE-2025-37978 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() Placing multiple protection informati… |
CVE-2025-37977 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set If dma-coherent proper… |
CVE-2025-37975 | High | 7.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[j] to acce… |
CVE-2025-37974 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device() error return The zpci_create_device(… |
CVE-2025-37973 | High | 8.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation Curren… |
CVE-2025-37972 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: Input: mtk-pmic-keys - fix possible null pointer dereference In mtk_pmic_keys_probe, the… |
CVE-2025-37971 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: staging: bcm2835-camera: Initialise dev in v4l2_dev Commit 42a2f6664e18 ("staging: vc04_s… |
CVE-2025-37970 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo Prevent st_lsm6dsx_read… |
CVE-2025-37969 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo Prevent st_lsm6d… |
CVE-2025-37968 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function… |
CVE-2025-37967 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix deadlock This patch introduces the ucsi_con_mutex_lock… |
CVE-2025-37966 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: riscv: Fix kernel crash due to PR_SET_TAGGED_ADDR_CTRL When userspace does PR_SET_TAGGED_… |
CVE-2025-37965 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix invalid context error in dml helper [Why] "BUG: sleeping function ca… |
CVE-2025-48018 | High | 7.5 | 2025-05-20 | An authenticated user can modify application state data. |
CVE-2025-48017 | Critical | 9.0 | 2025-05-20 | Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files |
CVE-2025-48016 | Medium | 4.3 | 2025-05-20 | OpenFlow discovery protocol can exhaust resources because it is not rate limited |
CVE-2025-48015 | Low | 3.7 | 2025-05-20 | Failed login response could be different depending on whether the username was local or central. |
CVE-2025-48014 | High | 7.5 | 2025-05-20 | Password guessing limits could be bypassed when using LDAP authentication. |
CVE-2025-37964 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Eliminate window where TLB flushes may be inadvertently skipped tl;dr: There is a… |
CVE-2025-37963 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users Support for eBPF pro… |
CVE-2025-37962 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix memory leak in parse_lease_state() The previous patch that added bounds check… |
CVE-2025-37961 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in do_output_route4 syzbot reports for uninit-value for… |
CVE-2025-37960 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: memblock: Accept allocated memory before use in memblock_double_array() When increasing t… |
CVE-2025-37959 | Critical | 9.4 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: bpf: Scrub packet on bpf_redirect_peer When bpf_redirect_peer is used to redirect packets… |
CVE-2025-37958 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix dereferencing invalid pmd migration entry When migrating a THP, concu… |
CVE-2025-37957 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception Previously, commit ed129ec9057… |
CVE-2025-37956 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent rename with empty string Client can send empty newname string to ksmbd ser… |
CVE-2025-37955 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to o… |
CVE-2025-37954 | High | 7.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in open_cached_dir with lease breaks A pre-existing valid cfid re… |
CVE-2025-37953 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_deactivate() idempotent Alan reported a NULL pointer dereference in htb… |
CVE-2025-37952 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destr… |
CVE-2025-37951 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job times out, we… |
CVE-2025-37950 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages… |
CVE-2025-37949 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the… |
CVE-2025-37948 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program… |
CVE-2025-37947 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() di… |
CVE-2025-37946 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit… |
CVE-2025-37945 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DS… |
CVE-2025-37944 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process Currently, ath12k_dp_… |
CVE-2025-37943 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi In certain cases, h… |
CVE-2025-37941 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_… |
CVE-2025-37940 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large nu… |
CVE-2025-37939 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext core_relo header Update btf_ext_parse_info() to ensure the… |
CVE-2025-37938 | High | 7.1 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the forma… |
CVE-2025-37937 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000_set_dds()… |
CVE-2025-37936 | High | 8.7 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. When generating… |
CVE-2025-37935 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function det… |
CVE-2025-37934 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction Actually ch… |
CVE-2025-37933 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat message… |
CVE-2025-37932 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: sch_htb: make htb_qlen_notify() idempotent htb_qlen_notify() always deactivates the HTB c… |
CVE-2025-37931 | High | 7.3 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize When running machines with 64k page s… |
CVE-2025-37930 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() Nouveau is mostly designed in a… |
CVE-2025-37929 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays Commit a5951389e58d ("arm… |
CVE-2025-37928 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: dm-bufio: don't schedule in atomic context A BUG was reported as below when CONFIG_DEBUG_… |
CVE-2025-37927 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid There is a string parsing… |
CVE-2025-37926 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_session_rpc_open A UAF issue can occur due to a race c… |
CVE-2025-37924 | Critical | 9.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in kerberos authentication Setting sess->user = NULL was introd… |
CVE-2025-37923 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: tracing: Fix oob write in trace_seq_to_buffer() syzbot reported this bug: ===============… |
CVE-2025-37922 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: book3s64/radix : Align section vmemmap start address to PAGE_SIZE A vmemmap altmap is a d… |
CVE-2025-37921 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted from a… |
CVE-2025-37920 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: xsk: Fix race condition in AF_XDP generic RX path Move rx_lock from xsk_socket to xsk_buf… |
CVE-2025-37919 | Medium | 5.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot Update chip data using dev… |
CVE-2025-37918 | High | 8.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() A NULL pointer derefere… |
CVE-2025-37917 | High | 7.5 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll Use spin_lock_i… |
CVE-2025-37916 | High | 7.8 | 2025-05-20 | In the Linux kernel, the following vulnerability has been resolved: pds_core: remove write-after-free of client_id A use-after-free error popped up in stress… |