2025 CVEs (page 367)
Page 367 of 436 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-30825 | High | 8.8 | 2025-04-01 | Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce wpc-smart-linked-products allows Privilege Es… |
CVE-2025-30807 | Critical | 9.3 | 2025-04-01 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martin Nguyen Next-Cart Store to WooCommerce Migration ne… |
CVE-2025-30778 | High | 7.1 | 2025-04-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VPSUForm v-form allows Reflected XSS.This is… |
CVE-2025-30580 | Critical | 10.0 | 2025-04-01 | Improper Control of Generation of Code ('Code Injection') vulnerability in kellydiek DigiWidgets Image Editor digiwidgets-image-editor allows Remote Code Inclu… |
CVE-2025-30554 | High | 7.1 | 2025-04-01 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Abhishek Kumar Frizzly frizzly allows Reflected XSS.This… |
CVE-2025-29070 | High | 7.5 | 2025-04-01 | A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a remote attacker to cause a denial of servic… |
CVE-2025-29049 | Medium | 6.3 | 2025-04-01 | Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathL… |
CVE-2025-29036 | Medium | 5.9 | 2025-04-01 | An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component. |
CVE-2025-29033 | High | 7.3 | 2025-04-01 | An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote attacker to escalate privileges via the /saml/index.php?r=" HTTP GET parameter. |
CVE-2025-29069 | High | 7.3 | 2025-04-01 | A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is r… |
CVE-2025-3096 | | 2025-04-01 | Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page. | |
CVE-2025-31137 | High | 7.5 | 2025-04-01 | React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all R… |
CVE-2025-26056 | Medium | 5.4 | 2025-04-01 | A command injection vulnerability exists in the Infinxt iEdge 100 2.1.32 in the Troubleshoot module "MTR" functionality. The vulnerability is due to improper v… |
CVE-2025-26055 | Medium | 6.5 | 2025-04-01 | An OS Command Injection vulnerability exists in the Infinxt iEdge 100 2.1.32 Troubleshoot module, specifically in the tracertVal parameter of the Tracert funct… |
CVE-2025-26054 | Medium | 5.4 | 2025-04-01 | Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting (XSS) via the "Description" field during LAN configuration. |
CVE-2025-29208 | Medium | 6.5 | 2025-04-01 | CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php. |
CVE-2025-28132 | Medium | 4.6 | 2025-04-01 | A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized… |
CVE-2025-28131 | Medium | 4.6 | 2025-04-01 | A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative action… |
CVE-2025-27829 | High | 7.3 | 2025-04-01 | An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible… |
CVE-2025-25041 | Medium | 5.5 | 2025-04-01 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTE… |
CVE-2025-21986 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification… |
CVE-2025-21985 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bound accesses [WHAT & HOW] hpo_stream_to_link_encoder_mappin… |
CVE-2025-21984 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mm: fix kernel BUG when userfaultfd_move encounters swapcache userfaultfd_move() checks w… |
CVE-2025-21983 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq Currently kvfree_rcu() APIs use a system… |
CVE-2025-21982 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw devm_kasprintf() calls can r… |
CVE-2025-21981 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ice: fix memory leak in aRFS after reset Fix aRFS (accelerated Receive Flow Steering) str… |
CVE-2025-21980 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: sched: address a potential NULL pointer dereference in the GRED scheduler. If kzalloc in… |
CVE-2025-21979 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from th… |
CVE-2025-21978 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: Fix address space leak when Hyper-V DRM device is removed When a Hyper-V DRM… |
CVE-2025-21977 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Gen 2 Hyper-V VMs bo… |
CVE-2025-21976 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: fbdev: hyperv_fb: Allow graceful removal of framebuffer When a Hyper-V framebuffer device… |
CVE-2025-21975 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: handle errors in mlx5_chains_create_table() In mlx5_chains_create_table(), the… |
CVE-2025-21974 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() The bnxt_queue_mem_… |
CVE-2025-21973 | High | 7.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} When qstats-get operatio… |
CVE-2025-21972 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: mctp: unshare packets when reassembling Ensure that the frag_list used for reassembl… |
CVE-2025-21971 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net_sched: Prevent creation of classes with TC_H_ROOT The function qdisc_tree_reduce_back… |
CVE-2025-21970 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from b… |
CVE-2025-21969 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync comma… |
CVE-2025-21968 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix slab-use-after-free on hdcp_work [Why] A slab-use-after-free is repo… |
CVE-2025-21967 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could b… |
CVE-2025-21966 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corrupti… |
CVE-2025-21965 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() If a BPF scheduler provides an i… |
CVE-2025-21964 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount par… |
CVE-2025-21963 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount par… |
CVE-2025-21962 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount p… |
CVE-2025-21961 | High | 7.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix truesize for mb-xdp-pass case When mb-xdp is set and return is XDP_PASS, p… |
CVE-2025-21960 | High | 7.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: do not update checksum in bnxt_xdp_build_skb() The bnxt_rx_pkt() updates ip_su… |
CVE-2025-21959 | High | 7.3 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() Sinc… |
CVE-2025-21958 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Revert "openvswitch: switch to per-action label counting in conntrack" Currently, ovs_ct_… |
CVE-2025-21957 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla1280: Fix kernel oops when debug level > 2 A null dereference or oops exception… |
CVE-2025-21956 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign normalized_pix_clk when color depth = 14 [WHY & HOW] A warning me… |
CVE-2025-21955 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock break notification ksmbd_work could be fr… |
CVE-2025-21954 | Critical | 9.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: netmem: prevent TX of unreadable skbs Currently on stable trees we have support for netme… |
CVE-2025-21953 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: mana: cleanup mana struct after debugfs_remove() When on a MANA VM hibernation is tr… |
CVE-2025-21952 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Update power supply values with a unified work handler corsair_void_pr… |
CVE-2025-21951 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock There are mul… |
CVE-2025-21950 | High | 7.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl In the "pmcmd_ioc… |
CVE-2025-21949 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: Set hugetlb mmap base address aligned with pmd size With ltp test case "testca… |
CVE-2025-21948 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL… |
CVE-2025-21947 | High | 8.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix type confusion via race condition when using ipc_msg_send_request req->handle… |
CVE-2025-21946 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If osidoffset, gsidoffset and dacloffset cou… |
CVE-2025-21945 | High | 8.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock->zero_len has value, ->llist of smb_lo… |
CVE-2025-21944 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix bug on trap in smb2_lock If lock count is greater than 1, flags could be old v… |
CVE-2025-21943 | Medium | 4.7 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both new_device_stor… |
CVE-2025-21942 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix extent range end unlock in cow_file_range() Running generic/751 on the… |
CVE-2025-21941 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params… |
CVE-2025-21940 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix NULL Pointer Dereference in KFD queue Through KFD IOCTL Fuzzing we encoun… |
CVE-2025-21939 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers without notifier lock The pnfs that we… |
CVE-2025-21938 | High | 7.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr If multiple con… |
CVE-2025-21937 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() Add check for the return… |
CVE-2025-21936 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() Add check for the re… |
CVE-2025-21935 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: rapidio: add check for rio_add_net() in rio_scan_alloc_net() The return value of rio_add_… |
CVE-2025-21934 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: rapidio: fix an API misues when rio_add_net() fails rio_add_net() calls device_register()… |
CVE-2025-21933 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When update_mmu_cache_range() is called… |
CVE-2025-21932 | High | 7.0 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mm: abort vma_modify() on merge out of memory failure The remainder of vma_modify() relie… |
CVE-2025-21931 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio Commit b15c87263a69 ("… |
CVE-2025-21930 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't try to talk to a dead firmware This fixes: bad state = 0 WAR… |
CVE-2025-21929 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() During the `rmmod`… |
CVE-2025-21928 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() The system can experie… |
CVE-2025-21927 | Critical | 9.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() does… |
CVE-2025-21926 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment In __udp_gso_segment the skb destructor is r… |
CVE-2025-21925 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: llc: do not use skb_get() before dev_queue_xmit() syzbot is able to crash hosts [1], usin… |
CVE-2025-21924 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an e… |
CVE-2025-21923 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-steam: Fix use-after-free when detaching device When a hid-steam device is remov… |
CVE-2025-21922 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: ppp: Fix KMSAN uninit-value warning with bpf Syzbot caught an "KMSAN: uninit-value" warni… |
CVE-2025-21921 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device ethnl_req_get_phydev(… |
CVE-2025-21920 | High | 7.1 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type Currently, VLAN devices can be created on top of non… |
CVE-2025-21919 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list child_cfs_rq_on_list… |
CVE-2025-21918 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix NULL pointer access Resources should be released only after all thr… |
CVE-2025-21917 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Flush the notify_hotplug_work When performing continuous unbind/bind… |
CVE-2025-21916 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: usb: atm: cxacru: fix a flaw in existing endpoint checks Syzbot once again identified a f… |
CVE-2025-21915 | High | 7.0 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: cdx: Fix possible UAF error in driver_override_show() Fixed a possible UAF problem in dri… |
CVE-2025-21914 | High | 7.8 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed interrupt scenario In case of interrup… |
CVE-2025-21913 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() Xen doesn't offer MSR_FAM10H_MMI… |
CVE-2025-21912 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: gpio: rcar: Use raw_spinlock to protect register access Use raw_spinlock in order to fix… |
CVE-2025-21911 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: avoid deadlock on fence release Do scheduler queue fence release process… |
CVE-2025-21910 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: regulatory: improve invalid hints checking Syzbot keeps reporting an issu… |
CVE-2025-21909 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject cooked mode if it is set along with other flags It is possible to s… |
CVE-2025-21908 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback Add PF_KCOMPACTD fla… |
CVE-2025-21907 | Medium | 5.5 | 2025-04-01 | In the Linux kernel, the following vulnerability has been resolved: mm: memory-failure: update ttu flag inside unmap_poisoned_folio Patch series "mm: memory_… |