2025 CVEs (page 331)
Page 331 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-37786 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: free routing table on probe failure If complete = true in dsa_tree_setup(), it… |
CVE-2025-37784 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP… |
CVE-2025-37783 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Fix error pointers in dpu_plane_virtual_atomic_check The function dpu_plane_… |
CVE-2025-37781 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i2c: cros-ec-tunnel: defer probe if parent EC is not present When i2c-cros-ec-tunnel and… |
CVE-2025-37780 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: isofs: Prevent the use of too small fid syzbot reported a slab-out-of-bounds Read in isof… |
CVE-2025-37779 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: lib/iov_iter: fix to increase non slab folio refcount When testing EROFS file-backed moun… |
CVE-2025-37778 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and doe… |
CVE-2025-37777 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_c… |
CVE-2025-37776 | High | 8.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_break_all_levII_oplock() There is a room in smb_break_al… |
CVE-2025-37775 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix the warning from __kernel_write_iter [ 2110.972290] ------------[ cut here ]--… |
CVE-2025-37774 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: slab: ensure slab->obj_exts is clear in a newly allocated slab page ktest recently report… |
CVE-2025-37773 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: add filesystem context source name check In certain scenarios, for example, dur… |
CVE-2025-37772 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cma_netevent_work_handler struct rdma_cm_id has member "… |
CVE-2025-37771 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37770 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37769 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/smu11: Prevent division by zero The user can set any speed value. If speed is… |
CVE-2025-37768 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37767 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37766 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greate… |
CVE-2025-37765 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: prime: fix ttm_bo_delayed_delete oops Fix an oops in ttm_bo_delayed_delete w… |
CVE-2025-37764 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix firmware memory leaks Free the memory used to hold the results of fi… |
CVE-2025-37763 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: take paired job reference For paired jobs, have the fragment job take a… |
CVE-2025-37762 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix missed dmabuf unpinning in error path of prepare_fb() Correct error handl… |
CVE-2025-37761 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix an out-of-bounds shift when invalidating TLB When the size of the range inval… |
CVE-2025-37760 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: add give_up_on_oom option on modify/merge, use in uffd release Currently, if a VM… |
CVE-2025-25016 | Medium | 4.3 | 2025-05-01 | Unrestricted file upload in Kibana allows an authenticated attacker to compromise software integrity by uploading a crafted malicious file due to insufficient… |
CVE-2025-23254 | High | 8.8 | 2025-05-01 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRT… |
CVE-2025-23245 | Medium | 5.5 | 2025-05-01 | NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resource… |
CVE-2025-23244 | High | 7.8 | 2025-05-01 | NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this v… |
CVE-2025-37759 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ublk: fix handling recovery & reissue in ublk_abort_queue() Commit 8284066946e6 ("ublk: g… |
CVE-2025-37758 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() devm_ioremap() r… |
CVE-2025-37757 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tipc: fix memory leak in tipc_link_xmit In case the backlog transmit queue for system-imp… |
CVE-2025-37756 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS s… |
CVE-2025-37755 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: handle page_pool_dev_alloc_pages error page_pool_dev_alloc_pages could return… |
CVE-2025-37754 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/huc: Fix fence not released on early probe errors HuC delayed loading fence, int… |
CVE-2025-37752 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: move the limit validation It is not sufficient to directly validate t… |
CVE-2025-37751 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at t… |
CVE-2025-37750 | Critical | 9.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f7025d861694 ("smb: cli… |
CVE-2025-37749 | High | 8.2 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure we have enough data i… |
CVE-2025-37748 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group Currently, mtk_iommu… |
CVE-2025-37747 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeing a sigtrap event if… |
CVE-2025-37746 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_register, wrongly usi… |
CVE-2025-37745 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() syzbot reported a deadl… |
CVE-2025-37744 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_pci_remove() Kmemleak reported this error: unr… |
CVE-2025-37743 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses monitor destination… |
CVE-2025-37742 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of imap allocated in the diMount() function syzbot reports t… |
CVE-2025-37741 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: jfs: Prevent copying of nlink with value 0 from disk inode syzbot report a deadlock in di… |
CVE-2025-37740 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: jfs: add sanity check for agwidth in dbMount The width in dmapctl of the AG is zero, it t… |
CVE-2025-37739 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() syzbot reports an… |
CVE-2025-37738 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore… |
CVE-2025-23163 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: vlan: don't propagate flags on open With the device instance lock, there is now a po… |
CVE-2025-23162 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Don't try to trigger a full GT reset if VF VFs don't have access to the GDRST(… |
CVE-2025-23161 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type The access to the PCI config space… |
CVE-2025-23160 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initializatio… |
CVE-2025-23159 | High | 8.4 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add a check to handle OOB in sfr region sfr->buf_size is in shared mem… |
CVE-2025-23158 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi: add check to handle incorrect queue size qsize represents size of shar… |
CVE-2025-23157 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: add check to avoid out of bound access There is a possibility t… |
CVE-2025-23156 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: media: venus: hfi_parser: refactor hfi packet parsing logic words_count denotes the numbe… |
CVE-2025-23155 | High | 7.1 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Fix accessing freed irq affinity_hint In stmmac_request_irq_multi_msi(), a p… |
CVE-2025-23154 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix io_req_post_cqe abuse by send bundle [ 114.987980][ T5313] WARNING: CP… |
CVE-2025-23153 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() Fix a silly bug where… |
CVE-2025-23152 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: arm64/crc-t10dif: fix use of out-of-scope array in crc_t10dif_arch() Fix a silly bug wher… |
CVE-2025-23151 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix race between unprepare and queue_buf A client driver may use mhi_unpr… |
CVE-2025-23150 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix off-by-one error in do_split Syzkaller detected a use-after-free issue in ext4_… |
CVE-2025-23149 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: tpm: do not start chip while suspended Checking TPM_CHIP_FLAG_SUSPENDED after the call to… |
CVE-2025-23148 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() soc_dev_attr… |
CVE-2025-23147 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: i3c: Add NULL pointer check in i3c_master_queue_ibi() The I3C master driver may receive a… |
CVE-2025-23146 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mfd: ene-kb3930: Fix a potential NULL pointer dereference The off_gpios could be NULL. Ad… |
CVE-2025-23145 | High | 7.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix NULL pointer in can_accept_new_subflow When testing valkey benchmark tool with… |
CVE-2025-23144 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() Lockdep detects… |
CVE-2025-23143 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. When I ran the repr… |
CVE-2025-23142 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: sctp: detect and prevent references to a freed transport in sendmsg sctp_sendmsg() re-use… |
CVE-2025-23141 | High | 7.8 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses Acquire a loc… |
CVE-2025-23140 | Medium | 5.5 | 2025-05-01 | In the Linux kernel, the following vulnerability has been resolved: misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error Afte… |
CVE-2025-4164 | High | 7.3 | 2025-05-01 | A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file c… |
CVE-2025-4163 | Medium | 6.3 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. This issue affects some unknown processing of the file… |
CVE-2025-3890 | Medium | 6.4 | 2025-05-01 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp_cart_button' shortcode in all version… |
CVE-2025-3889 | Medium | 5.3 | 2025-05-01 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 via the '… |
CVE-2025-3874 | Medium | 6.5 | 2025-05-01 | The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.3 due to la… |
CVE-2025-1529 | Medium | 6.4 | 2025-05-01 | The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all versions up to, and including, 3.5.3 due… |
CVE-2025-4162 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical was found in PCMan FTP Server up to 2.0.7. This vulnerability affects unknown code of the component ASCII Command Handle… |
CVE-2025-4161 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical has been found in PCMan FTP Server up to 2.0.7. This affects an unknown part of the component VERBOSE Command Handler. T… |
CVE-2025-27007 | Critical | 9.8 | 2025-05-01 | Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through… |
CVE-2025-4160 | High | 7.3 | 2025-05-01 | A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component… |
CVE-2025-4159 | High | 7.3 | 2025-05-01 | A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the… |
CVE-2025-4158 | High | 7.3 | 2025-05-01 | A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been classified as critical. Affected is an unknown function of the component PROMPT Command… |
CVE-2025-4157 | Medium | 6.3 | 2025-05-01 | A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/booki… |
CVE-2025-4156 | Medium | 6.3 | 2025-05-01 | A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/cha… |
CVE-2025-4155 | Medium | 6.3 | 2025-05-01 | A vulnerability, which was classified as critical, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/edit-boat.p… |
CVE-2025-47154 | Critical | 9.0 | 2025-05-01 | LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attacker… |
CVE-2025-4154 | Medium | 6.3 | 2025-05-01 | A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this issue is some unknown functi… |
CVE-2025-4153 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical was found in PHPGurukul Park Ticketing Management System 2.0. Affected by this vulnerability is an unknown functionality… |
CVE-2025-4100 | Medium | 6.4 | 2025-05-01 | The Nautic Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'np_marinetraffic_map' shortcode in all versions up to, and… |
CVE-2025-47153 | Medium | 6.5 | 2025-05-01 | Certain build processes for libuv and Node.js for 32-bit systems, such as for the nodejs binary package through nodejs_20.19.0+dfsg-2_i386.deb for Debian GNU/L… |
CVE-2025-3521 | Medium | 6.4 | 2025-05-01 | The Team Members – Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting… |
CVE-2025-4152 | High | 7.3 | 2025-05-01 | A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwd… |
CVE-2025-4151 | High | 7.3 | 2025-05-01 | A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |
CVE-2025-3504 | Medium | 4.8 | 2025-05-01 | The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perfo… |
CVE-2025-3503 | Medium | 4.8 | 2025-05-01 | The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perfo… |
CVE-2025-3502 | Medium | 4.8 | 2025-05-01 | The WP Maps WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perfo… |