2025 CVEs (page 322)
Page 322 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-37880 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: um: work around sched_yield not yielding in time-travel mode sched_yield by a userspace m… |
CVE-2025-37879 | Critical | 9.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9_client_write() a… |
CVE-2025-37878 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init Move the get_ctx(child_ct… |
CVE-2025-37877 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommu_device_register() encounters an error, it… |
CVE-2025-37876 | High | 7.0 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS When testing a special config: CON… |
CVE-2025-37875 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: igc: fix PTM cycle trigger logic Writing to clear the PTM status 'valid' bit while the PT… |
CVE-2025-37874 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix memory leak in ngbe_probe() error path When ngbe_sw_init() is called, memo… |
CVE-2025-37873 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod… |
CVE-2025-37872 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix memory leak in txgbe_probe() error path When txgbe_sw_init() is called, m… |
CVE-2025-37871 | High | 7.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sc_count directly if fail to queue dl_recall A deadlock warning occurred w… |
CVE-2025-37870 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: prevent hang on link training fail [Why] When link training fails, the p… |
CVE-2025-37869 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in… |
CVE-2025-37868 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/userptr: fix notifier vs folio deadlock User is reporting what smells like notifie… |
CVE-2025-37867 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Silence oversized kvmalloc() warning syzkaller triggered an oversized kvmalloc… |
CVE-2025-37866 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() A warning is seen whe… |
CVE-2025-37865 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported Russell King… |
CVE-2025-37864 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: clean up FDB, MDB, VLAN entries on unbind As explained in many places such as c… |
CVE-2025-37863 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: ovl: don't allow datadir only In theory overlayfs could support upper layer directly refe… |
CVE-2025-37862 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidff_find_fields This function triggered a n… |
CVE-2025-37861 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue When the task ma… |
CVE-2025-37859 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: page_pool: avoid infinite loop to schedule delayed worker We noticed the kworker in page_… |
CVE-2025-37858 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer overflow in AG size calculation The JFS filesystem calculates all… |
CVE-2025-37857 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: scsi: st: Fix array overflow in st_setup() Change the array size to follow parms size ins… |
CVE-2025-37856 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: btrfs: harden block_group::bg_list against list_del() races As far as I can tell, these c… |
CVE-2025-37855 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Guard Possible Null Pointer Dereference [WHY] In some situations, dc->re… |
CVE-2025-37854 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to… |
CVE-2025-37853 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hang_hws skip GPU with MES debugfs hang_hws is used by GPU reset test… |
CVE-2025-37852 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() Add error… |
CVE-2025-37851 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: Add 'plane' value check Function dispc_ovl_setup is not intended to work w… |
CVE-2025-37850 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() With CONFIG_COMPILE_TEST &… |
CVE-2025-37849 | High | 8.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to sha… |
CVE-2025-37848 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS… |
CVE-2025-37847 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpu_ms_cleanup() Fix deadlock in ivpu_ms_cleanup() by preven… |
CVE-2025-37846 | High | 7.1 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not us… |
CVE-2025-37845 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe… |
CVE-2025-37844 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: cifs: avoid NULL pointer dereference in dbg call cifs_server_dbg() implies server to be n… |
CVE-2025-37843 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: PCI: pciehp: Avoid unnecessary device replacement check Hot-removal of nested PCI hotplug… |
CVE-2025-37842 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage… |
CVE-2025-37841 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL du… |
CVE-2025-37840 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below c… |
CVE-2025-37839 | High | 7.8 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequ… |
CVE-2025-37837 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() Two WARNINGs are observed… |
CVE-2025-37836 | Medium | 5.5 | 2025-05-09 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call pu… |
CVE-2025-2253 | Critical | 9.8 | 2025-05-09 | The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin no… |
CVE-2025-4466 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?act… |
CVE-2025-4465 | High | 7.3 | 2025-05-09 | A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the fil… |
CVE-2025-4464 | High | 7.3 | 2025-05-09 | A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4377 | | 2025-05-09 | Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.php and it… | |
CVE-2025-4376 | | 2025-05-09 | Improper Input Validation vulnerability in Sparx Systems Pro Cloud Server's WebEA model search field allows Cross-Site Scripting (XSS). This issue affects Pro… | |
CVE-2025-4375 | | 2025-05-09 | Cross-Site Request Forgery (CSRF) vulnerability in Sparx Systems Pro Cloud Server allows Cross-Site Request Forgery to perform Session Hijacking. Cross-Site Re… | |
CVE-2025-3463 | | 2025-05-09 | "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS Dr… | |
CVE-2025-3462 | | 2025-05-09 | "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may al… | |
CVE-2025-4463 | High | 7.3 | 2025-05-09 | A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?a… |
CVE-2025-4462 | High | 8.8 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /b… |
CVE-2025-4461 | Low | 2.4 | 2025-05-09 | A vulnerability classified as problematic was found in TOTOLINK N150RT 3.4.0-B20190525. This vulnerability affects unknown code of the component Virtual Server… |
CVE-2025-47737 | Low | 2.9 | 2025-05-09 | lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero. |
CVE-2025-47736 | Low | 2.9 | 2025-05-09 | dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8. |
CVE-2025-47735 | Low | 2.9 | 2025-05-09 | inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization. |
CVE-2025-4460 | Low | 2.4 | 2025-05-09 | A vulnerability classified as problematic has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the component URL Filtering Page… |
CVE-2025-4459 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown function… |
CVE-2025-4458 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2025-4457 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2025-4456 | High | 7.3 | 2025-05-09 | A vulnerability classified as critical has been found in Project Worlds Car Rental Project 1.0. Affected is an unknown function of the file /signup.php. The ma… |
CVE-2025-3714 | Critical | 9.8 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote att… |
CVE-2025-3713 | High | 7.5 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote atta… |
CVE-2025-3712 | High | 7.5 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Heap-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote atta… |
CVE-2025-3711 | Critical | 9.8 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote att… |
CVE-2025-3710 | Critical | 9.8 | 2025-05-09 | The LCD KVM over IP Switch CL5708IM has a Stack-based Buffer Overflow vulnerability in firmware versions prior to v2.2.215, allowing unauthenticated remote att… |
CVE-2025-4455 | High | 7.0 | 2025-05-09 | A vulnerability was found in Patch My PC Home Updater up to 5.1.3.0. It has been rated as critical. This issue affects some unknown processing in the library a… |
CVE-2025-4454 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in D-Link DIR-619L 2.04B04. It has been declared as critical. This vulnerability affects the function wake_on_lan. The manipulation o… |
CVE-2025-4453 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in D-Link DIR-619L 2.04B04. It has been classified as critical. This affects the function formSysCmd. The manipulation of the argumen… |
CVE-2025-3811 | Critical | 9.8 | 2025-05-09 | The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the pl… |
CVE-2025-3810 | Critical | 9.8 | 2025-05-09 | The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the pl… |
CVE-2025-4452 | High | 8.8 | 2025-05-09 | A vulnerability was found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this issue is the function formSetWizard2. The manipulation of the… |
CVE-2025-4451 | High | 8.8 | 2025-05-09 | A vulnerability has been found in D-Link DIR-619L 2.04B04 and classified as critical. Affected by this vulnerability is the function formSetWAN_Wizard52. The m… |
CVE-2025-4450 | High | 8.8 | 2025-05-09 | A vulnerability, which was classified as critical, was found in D-Link DIR-619L 2.04B04. Affected is the function formSetEasy_Wizard. The manipulation of the a… |
CVE-2025-4449 | High | 8.8 | 2025-05-09 | A vulnerability, which was classified as critical, has been found in D-Link DIR-619L 2.04B04. This issue affects the function formEasySetupWizard3. The manipul… |
CVE-2025-4448 | High | 8.8 | 2025-05-09 | A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of t… |
CVE-2025-4446 | High | 8.0 | 2025-05-09 | A vulnerability has been found in H3C GR-5400AX up to 100R008 and classified as critical. This vulnerability affects the function Edit_List_SSID of the file /g… |
CVE-2025-4445 | Medium | 6.3 | 2025-05-09 | A vulnerability classified as critical has been found in D-Link DIR-605L 2.13B01. Affected is the function wake_on_lan. The manipulation of the argument mac le… |
CVE-2025-4443 | Medium | 6.3 | 2025-05-09 | A vulnerability was found in D-Link DIR-605L 2.13B01. It has been rated as critical. This issue affects the function sub_454F2C. The manipulation of the argume… |
CVE-2025-4442 | High | 8.8 | 2025-05-09 | A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetWAN_Wizard55. The manipu… |
CVE-2025-4441 | High | 8.8 | 2025-05-08 | A vulnerability was found in D-Link DIR-605L 2.13B01. It has been classified as critical. This affects the function formSetWAN_Wizard534. The manipulation of t… |
CVE-2025-4440 | High | 8.0 | 2025-05-08 | A vulnerability was found in H3C GR-1800AX up to 100R008 and classified as critical. Affected by this issue is the function EnableIpv6 of the file /goform/aspF… |
CVE-2025-47733 | Critical | 9.1 | 2025-05-08 | Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network |
CVE-2025-47732 | High | 8.7 | 2025-05-08 | Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network. |
CVE-2025-33072 | High | 8.1 | 2025-05-08 | Improper access control in Azure allows an unauthorized attacker to disclose information over a network. |
CVE-2025-31946 | Medium | 6.2 | 2025-05-08 | Pixmeo OsiriX MD is vulnerable to a local use after free scenario, which could allow an attacker to locally import a crafted DICOM file and cause memory corru… |
CVE-2025-29972 | Critical | 9.9 | 2025-05-08 | Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network. |
CVE-2025-29827 | Critical | 9.9 | 2025-05-08 | Improper authorization in Azure Automation allows an authorized attacker to elevate privileges over a network. |
CVE-2025-29813 | Critical | 10.0 | 2025-05-08 | Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network. |
CVE-2025-27720 | High | 7.4 | 2025-05-08 | The Pixmeo Osirix MD Web Portal sends credential information without encryption, which could allow an attacker to steal credentials. |
CVE-2025-27578 | High | 7.5 | 2025-05-08 | Pixmeo OsiriX MD is vulnerable to a use after free scenario, which could allow an attacker to upload a crafted DICOM file and cause memory corruption leading t… |
CVE-2025-1331 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use… |
CVE-2025-1330 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS… |
CVE-2025-1329 | High | 7.8 | 2025-05-08 | IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to failure to handle DNS… |
CVE-2025-28074 | Medium | 6.1 | 2025-05-08 | phpList before 3.6.15 is vulnerable to Cross-Site Scripting (XSS) due to improper input sanitization in lt.php. The vulnerability is exploitable when the appli… |
CVE-2025-46833 | | 2025-05-08 | Programs/P73_SimplePythonEncryption.py illustrates a simple Python encryption example using the RSA Algorithm. In versions prior to commit 6ce60b1, an attacker… | |
CVE-2025-46812 | | 2025-05-08 | Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Versions prior to 2.1.15 are vulnerable to XSS attacks when pasting malicious cod… | |
CVE-2025-46712 | Low | 3.7 | 2025-05-08 | Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2… |