2025 CVEs (page 347)
Page 347 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-3738 | Medium | 5.9 | 2025-04-16 | Vulnerability in Drupal Google Optimize.This issue affects Google Optimize: *.*. |
CVE-2025-3737 | Medium | 5.9 | 2025-04-16 | Vulnerability in Drupal Google Maps: Store Locator.This issue affects Google Maps: Store Locator: *.*. |
CVE-2025-3736 | Medium | 5.9 | 2025-04-16 | Vulnerability in Drupal Simple GTM.This issue affects Simple GTM: *.*. |
CVE-2025-3735 | Medium | 5.9 | 2025-04-16 | Vulnerability in Drupal Panelizer (obsolete).This issue affects Panelizer (obsolete): *.*. |
CVE-2025-3734 | Medium | 5.9 | 2025-04-16 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 b… |
CVE-2025-3733 | Medium | 6.5 | 2025-04-16 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal baguetteBox.Js allows Cross-Site Scripting (XSS).T… |
CVE-2025-2564 | Medium | 4.3 | 2025-04-16 | Mattermost versions 10.5.x <= 10.5.1, 10.4.x <= 10.4.3, 9.11.x <= 9.11.9 fail to properly enforce the 'Allow users to view/update archived channels' System Con… |
CVE-2025-20236 | High | 8.8 | 2025-04-16 | A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, whi… |
CVE-2025-20178 | Medium | 6.0 | 2025-04-16 | A vulnerability in the web-based management interface of Cisco Secure Network Analytics could allow an authenticated, remote attacker with valid administrative… |
CVE-2025-20150 | Medium | 5.3 | 2025-04-16 | A vulnerability in Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to enumerate LDAP user accounts. This vulnerability is due to the i… |
CVE-2025-3697 | Medium | 6.3 | 2025-04-16 | A vulnerability, which was classified as critical, has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This issue affects some u… |
CVE-2025-3696 | Medium | 6.3 | 2025-04-16 | A vulnerability classified as critical was found in SourceCodester Web-based Pharmacy Product Management System 1.0. This vulnerability affects unknown code of… |
CVE-2025-3694 | High | 7.3 | 2025-04-16 | A vulnerability classified as critical has been found in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part of the c… |
CVE-2025-23138 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: watch_queue: fix pipe accounting mismatch Currently, watch_queue_set_size() modifies the… |
CVE-2025-23137 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update Check if policy is NU… |
CVE-2025-23136 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for adev Not all devices have an ACPI companion fwnode… |
CVE-2025-23135 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Teardown riscv specific bits after kvm_exit During a module removal, kvm_exi… |
CVE-2025-23134 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: Don't take register_mutex with copy_from/to_user() The infamous mmap_lock ta… |
CVE-2025-23133 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11… |
CVE-2025-23132 | High | 7.0 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: f2fs: quota: fix to avoid warning in dquot_writeback_dquots() F2FS-fs (dm-59): checkpoint… |
CVE-2025-23131 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: dlm: prevent NPD when writing a positive value to event_done do_uevent returns the value… |
CVE-2025-23130 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid panic once fallocation fails for pinfile syzbot reports a f2fs bug as… |
CVE-2025-23129 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path If… |
CVE-2025-22128 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path If a… |
CVE-2025-22127 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential deadloop in prepare_compress_overwrite() Jan Prusakowski reported a k… |
CVE-2025-22126 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: md: fix mddev uaf while iterating all_mddevs list While iterating all_mddevs list from md… |
CVE-2025-22125 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that… |
CVE-2025-22124 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb In clustermd, separate w… |
CVE-2025-22123 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid accessing uninitialized curseg syzbot reports a f2fs bug as below: F2… |
CVE-2025-22122 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio >4GB folio is possible on some ARCHs, such as aarch64, 16G… |
CVE-2025-22121 | High | 8.4 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() There's issue as follows: B… |
CVE-2025-22120 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ext4: goto right label 'out_mmap_sem' in ext4_setattr() Otherwise, if ext4_inode_attach_j… |
CVE-2025-22119 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: init wiphy_work before allocating rfkill fails syzbort reported a uniniti… |
CVE-2025-22118 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ice: validate queue quanta parameters to prevent OOB access Add queue wraparound preventi… |
CVE-2025-22117 | High | 8.7 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() Fix using the untrus… |
CVE-2025-22116 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: idpf: check error for register_netdev() on init Current init logic ignores the error code… |
CVE-2025-22115 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block group refcount race in btrfs_create_pending_block_groups() Block group c… |
CVE-2025-22114 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't clobber ret in btrfs_validate_super() Commit 2a9bb78cfd36 ("btrfs: validate… |
CVE-2025-22113 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ext4: avoid journaling sb update on error if journal is destroying Presently we always BU… |
CVE-2025-22112 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnic_info array The bnxt_queue_{start | stop}() acc… |
CVE-2025-22111 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. SIOCBRDELIF is passed to dev_ioct… |
CVE-2025-22110 | Critical | 9.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: Initialize ctx to avoid memory allocation error It is possibl… |
CVE-2025-22109 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ax25: Remove broken autobind Binding AX25 socket by using the autobind feature leads to m… |
CVE-2025-22108 | High | 8.6 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Mask the bd_cnt field in the TX BD properly The bd_cnt field in the TX BD specif… |
CVE-2025-22107 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There… |
CVE-2025-22106 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: vmxnet3: unregister xdp rxq info in the reset path vmxnet3 does not unregister xdp rxq in… |
CVE-2025-22105 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: bonding: check xdp prog when set bond mode Following operations can trigger a warning[1]… |
CVE-2025-22104 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex du… |
CVE-2025-22103 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer dereference in l3mdev_l3_rcv When delete l3s ipvlan: ip link d… |
CVE-2025-22102 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix kernel panic during FW release This fixes a kernel panic seen d… |
CVE-2025-22101 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix Tx L4 checksum The hardware only supports L4 checksum offload for TCP/UDP… |
CVE-2025-22100 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix race condition when gathering fdinfo group samples Commit e16635d88fa0 (… |
CVE-2025-22099 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_dpsub: Add NULL check in zynqmp_audio_init devm_kasprintf() calls can r… |
CVE-2025-22098 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_dp: Fix a deadlock in zynqmp_dp_ignore_hpd_set() Instead of attempting the sa… |
CVE-2025-22097 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization f… |
CVE-2025-22096 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/gem: Fix error code msm_parse_deps() The SUBMIT_ERROR() macro turns the error cod… |
CVE-2025-22095 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: PCI: brcmstb: Fix error path after a call to regulator_bulk_get() If the regulator_bulk_g… |
CVE-2025-22094 | High | 7.3 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' Commit 176cda0619b6 ("powerpc/perf: A… |
CVE-2025-22093 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid NPD when ASIC does not support DMUB ctx->dmub_srv will de NULL if… |
CVE-2025-22092 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: PCI: Fix NULL dereference in SR-IOV VF creation error path Clean up when virtfn setup fai… |
CVE-2025-22091 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix page_size variable overflow Change all variables storing mlx5_umem_mkc_fin… |
CVE-2025-22090 | High | 7.3 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() If track_pfn_copy(… |
CVE-2025-22089 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Don't expose hw_counters outside of init net namespace Commit 467f432a521a ("R… |
CVE-2025-22088 | Critical | 9.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_… |
CVE-2025-22087 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix array bounds error with may_goto may_goto uses an additional 8 bytes on the stac… |
CVE-2025-22086 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow When cur_qp isn't NULL, in order to avo… |
CVE-2025-22085 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use-after-free when rename device name Syzbot reported a slab-use-after-fr… |
CVE-2025-22084 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1_uart_probe() function calls w1_uart_serd… |
CVE-2025-22083 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint If vhost_scsi_set_e… |
CVE-2025-22082 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: iio: backend: make sure to NULL terminate stack buffer Make sure to NULL terminate the bu… |
CVE-2025-22081 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + siz… |
CVE-2025-22080 | High | 8.4 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdr_first_de() The "de_off" and "used" variables co… |
CVE-2025-22079 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth field is 16-b… |
CVE-2025-22078 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: staging: vchiq_arm: Fix possible NPR of keep-alive thread In case vchiq_platform_conn_sta… |
CVE-2025-22077 | Critical | 9.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: Revert "smb: client: fix TCP timers deadlock after rmmod" This reverts commit e9f2517a3e1… |
CVE-2025-22076 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: exfat: fix missing shutdown check xfstests generic/730 test failed because after deleting… |
CVE-2025-22075 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: rtnetlink: Allocate vfinfo size for VF GUIDs when supported Commit 30aad41721e0 ("net/cor… |
CVE-2025-22074 | High | 8.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix r_count dec/increment mismatch r_count is only increased when there is an oplo… |
CVE-2025-22073 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fill_dir(), and call… |
CVE-2025-22072 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix gang destroy leaks" we… |
CVE-2025-22071 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak in spufs_create_context() Leak fixes back in 2008 missed one case - if… |
CVE-2025-22070 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix NULL pointer dereference on mkdir When a 9p tree was mounted with option 'posi… |
CVE-2025-22069 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_h… |
CVE-2025-22068 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ublk: make sure ubq->canceling is set when queue is frozen Now ublk driver depends on `ub… |
CVE-2025-22067 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() If requested… |
CVE-2025-22066 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: ASoC: imx-card: Add NULL check in imx_card_probe() devm_kasprintf() returns NULL when mem… |
CVE-2025-22065 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix adapter NULL pointer dereference on reboot With SRIOV enabled, idpf ends up cal… |
CVE-2025-22064 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: don't unregister hook when table is dormant When nf_tables_updchain… |
CVE-2025-22063 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling netlb… |
CVE-2025-22062 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: sctp: add mutual exclusion in proc_sctp_do_udp_port() We must serialize calls to sctp_udp… |
CVE-2025-22061 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix qid report in airoha_tc_get_htb_get_leaf_queue() Fix the following kerne… |
CVE-2025-22060 | Medium | 4.7 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, an… |
CVE-2025-22059 | High | 7.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: udp: Fix multiple wraparounds of sk->sk_rmem_alloc. __udp_enqueue_schedule_skb() has the… |
CVE-2025-22058 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: udp: Fix memory accounting leak. Matt Dowling reported a weird UDP memory usage issue. U… |
CVE-2025-22057 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58869b ("net: do not… |
CVE-2025-22056 | High | 7.8 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA… |
CVE-2025-22055 | High | 7.1 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: fix geneve_opt length integer overflow struct geneve_opt uses 5 bit length for each… |
CVE-2025-22054 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: arcnet: Add NULL check in com20020pci_probe() devm_kasprintf() returns NULL when memory a… |
CVE-2025-22053 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: net: ibmveth: make veth_pool_store stop hanging v2: - Created a single error handling unl… |
CVE-2025-22052 | Medium | 5.5 | 2025-04-16 | In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix Oops after disconnect in ni_usb If the usb dongle is disconnected subs… |