2025 CVEs (page 400)
Page 400 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-21769 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Add .owner to vmclock_miscdev_fops Without the .owner field, the module can… |
CVE-2025-21768 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels Some lwtunnels have a dst c… |
CVE-2025-21767 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context Th… |
CVE-2025-21766 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipv4: use RCU protection in __ip_rt_update_pmtu() __ip_rt_update_pmtu() must use RCU prot… |
CVE-2025-21765 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU protection in ip6_default_advmss() ip6_default_advmss() needs rcu protectio… |
CVE-2025-21764 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndisc_alloc_skb() ndisc_alloc_skb() can be called without RT… |
CVE-2025-21763 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: neighbour: use RCU protection in __neigh_notify() __neigh_notify() can be called without… |
CVE-2025-21762 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: arp: use RCU protection in arp_xmit() arp_xmit() can be called without RTNL or RCU protec… |
CVE-2025-21761 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: use RCU protection in ovs_vport_cmd_fill_info() ovs_vport_cmd_fill_info() ca… |
CVE-2025-21760 | High | 8.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in ndisc_send_skb() ndisc_send_skb() can be called without R… |
CVE-2025-21759 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: extend RCU protection in igmp6_send() igmp6_send() can be called without RTN… |
CVE-2025-21758 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: add RCU protection to mld_newpack() mld_newpack() can be called without RTNL… |
CVE-2025-21756 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vsock: Keep the binding until socket destruction Preserve sockets bindings; this includes… |
CVE-2025-21754 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion failure when splitting ordered extent after transaction abort If whi… |
CVE-2025-21753 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free when attempting to join an aborted transaction When we are tryi… |
CVE-2025-21752 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't use btrfs_set_item_key_safe on RAID stripe-extents Don't use btrfs_set_item_… |
CVE-2025-21751 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, change error flow on matcher disconnect Currently, when firmware failure o… |
CVE-2025-21750 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the return value of of_property_read_string_index() Somewhen betwee… |
CVE-2025-21749 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rose_bind() syzbot reported a soft lockup in rose_loopback_… |
CVE-2025-21748 | Critical | 9.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations i… |
CVE-2025-21747 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: drm/ast: astdp: Fix timeout for enabling video signal The ASTDP transmitter sometimes tak… |
CVE-2025-21746 | Medium | 4.7 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics - fix crash when enabling pass-through port When enabling a pass-through… |
CVE-2025-21745 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix class @block_class's subsystem refcount leakage blkcg_fill_root_iostats()… |
CVE-2025-21744 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() On removal of the devi… |
CVE-2025-21743 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix possible overflow in DPE length check Originally, it was possible for… |
CVE-2025-21742 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: use static NDP16 location in URB Original code allowed for the start of N… |
CVE-2025-21741 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: usbnet: ipheth: fix DPE OoB read Fix an out-of-bounds DPE read, limit the number of proce… |
CVE-2025-21739 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix use-after free in init error and remove paths devm_blk_crypto_profil… |
CVE-2025-21738 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing… |
CVE-2025-21737 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_mds_auth_match() We now free the temporary target path subs… |
CVE-2025-21736 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfs_fiemap() Since nilfs_bmap_lookup_contig() in… |
CVE-2025-21735 | High | 8.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which… |
CVE-2025-21734 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies… |
CVE-2025-21733 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix resetting of tracepoints If a timerlat tracer is started with the os… |
CVE-2025-21732 | Medium | 4.7 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error This patch addresses a… |
CVE-2025-21731 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nbd: don't allow reconnect after disconnect Following process can cause nbd_config UAF: … |
CVE-2025-21730 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid to init mgnt_entry list twice when WoWLAN failed If WoWLAN failed in r… |
CVE-2025-21729 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion The rtwdev->scanning… |
CVE-2025-21728 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: bpf: Send signals asynchronously if !preemptible BPF programs can execute in all kinds of… |
CVE-2025-21727 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-us… |
CVE-2025-21726 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF fo… |
CVE-2025-21725 | High | 7.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that NETWORK_INTERFACE_… |
CVE-2025-21724 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() Resolve a U… |
CVE-2025-21723 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix possible crash when setting up bsg fails If bsg_setup_queue() fails, th… |
CVE-2025-21722 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: do not force clear folio if buffer is referenced Patch series "nilfs2: protect bu… |
CVE-2025-21721 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle errors that nilfs_prepare_chunk() may return Patch series "nilfs2: fix iss… |
CVE-2025-21720 | High | 7.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: xfrm: delete intermediate secpath entry in packet offload mode Packets handled by hardwar… |
CVE-2025-21719 | High | 7.1 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: ipmr: do not call mr_mfc_uses_dev() for unres entries syzbot found that calling mr_mfc_us… |
CVE-2025-21718 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: rose: fix timer races against user threads Rose timers only acquire the socket spinl… |
CVE-2025-21717 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: add missing cpu_to_node to kvzalloc_node in mlx5e_open_xdpredirect_sq kvzalloc… |
CVE-2025-21716 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix uninit-value in vxlan_vnifilter_dump() KMSAN reported an uninit-value access i… |
CVE-2025-21715 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be use… |
CVE-2025-21714 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix implicit ODP use after free Prevent double queueing of implicit ODP mr des… |
CVE-2025-21713 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: Don't unset window if it was never set On pSeries, when user attem… |
CVE-2025-21712 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime After commit ec6bb299c7… |
CVE-2025-21711 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net/rose: prevent integer overflows in rose_setsockopt() In case of possible unpredictabl… |
CVE-2025-21710 | High | 8.2 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3 using the "pasta" pro… |
CVE-2025-21709 | High | 7.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dup_mmap() failures and uprobe registering If a memory allo… |
CVE-2025-21708 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: enable basic endpoint checking Syzkaller reports [1] encountering a co… |
CVE-2025-21707 | Critical | 9.8 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is th… |
CVE-2025-21706 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: only set fullmesh for subflow endp With the in-kernel path-manager, it is poss… |
CVE-2025-21705 | Medium | 5.5 | 2025-02-27 | In the Linux kernel, the following vulnerability has been resolved: mptcp: handle fastopen disconnect correctly Syzbot was able to trigger a data stream corr… |
CVE-2025-1726 | Medium | 4.3 | 2025-02-26 | There is a SQL injection issue in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a remote, authenticated attacker with low… |
CVE-2025-20161 | Medium | 5.1 | 2025-02-26 | A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow a… |
CVE-2025-20119 | Medium | 6.0 | 2025-02-26 | A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which cou… |
CVE-2025-20118 | Medium | 4.4 | 2025-02-26 | A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive informati… |
CVE-2025-20117 | Medium | 5.1 | 2025-02-26 | A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating sy… |
CVE-2025-20116 | Medium | 4.8 | 2025-02-26 | A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system. To exploit this… |
CVE-2025-20111 | High | 7.4 | 2025-02-26 | A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could al… |
CVE-2025-1634 | High | 7.5 | 2025-02-26 | A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a… |
CVE-2025-0941 | Medium | 5.8 | 2025-02-26 | MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the system. This data is not… |
CVE-2025-25462 | Medium | 5.5 | 2025-02-26 | A SQL Injection vulnerability was found in /admin/add-propertytype.php in PHPGurukul Land Record System Project in PHP v1.0 allows remote attackers to execute… |
CVE-2025-25827 | Medium | 6.8 | 2025-02-26 | A Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted UR… |
CVE-2025-25825 | High | 7.1 | 2025-02-26 | A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into t… |
CVE-2025-25823 | High | 7.3 | 2025-02-26 | A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into t… |
CVE-2025-25818 | Medium | 5.1 | 2025-02-26 | A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into t… |
CVE-2025-25813 | Medium | 5.1 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php. |
CVE-2025-25802 | Medium | 5.1 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php. |
CVE-2025-25800 | Medium | 5.3 | 2025-02-26 | SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php. |
CVE-2025-25799 | Medium | 6.0 | 2025-02-26 | SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php. |
CVE-2025-25797 | Medium | 5.1 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_smtp.php. |
CVE-2025-25796 | Medium | 5.1 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_template.php. |
CVE-2025-25794 | Medium | 5.1 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php. |
CVE-2025-25793 | Medium | 5.1 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php. |
CVE-2025-25792 | Medium | 4.4 | 2025-02-26 | SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php. |
CVE-2025-25791 | Medium | 4.4 | 2025-02-26 | An arbitrary file upload vulnerability in the plugin installation feature of YZNCMS v2.0.1 allows attackers to execute arbitrary code via uploading a crafted Z… |
CVE-2025-25790 | Critical | 9.8 | 2025-02-26 | An arbitrary file upload vulnerability in the component \controller\LocalTemplate.php of FoxCMS v1.2.5 allows attackers to execute arbitrary code via uploading… |
CVE-2025-25789 | Critical | 9.8 | 2025-02-26 | FoxCMS v1.2.5 was discovered to contain a remote code execution (RCE) vulnerability via the index() method at \controller\Sitemap.php. |
CVE-2025-25785 | Critical | 9.1 | 2025-02-26 | JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php. This vulnerability allows attackers… |
CVE-2025-25784 | Critical | 9.8 | 2025-02-26 | An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a… |
CVE-2025-25783 | Critical | 9.8 | 2025-02-26 | An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2025-1716 | Critical | 9.8 | 2025-02-26 | picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI packa… |
CVE-2025-1249 | Medium | 5.3 | 2025-02-26 | Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Leve… |
CVE-2025-26925 | Medium | 4.3 | 2025-02-26 | Cross-Site Request Forgery (CSRF) vulnerability in Required Admin Menu Manager allows Cross Site Request Forgery.This issue affects Admin Menu Manager: from n/… |
CVE-2025-0719 | Medium | 6.1 | 2025-02-26 | IBM Cloud Pak for Data 4.0.0 through 4.8.5 and 5.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbi… |
CVE-2025-26698 | Low | 2.7 | 2025-02-26 | Incorrect resource transfer between spheres issue exists in RevoWorks SCVX and RevoWorks Browser. If exploited, malicious files may be downloaded to the system… |
CVE-2025-1517 | Medium | 6.4 | 2025-02-26 | The Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates) plugin for WordPress i… |
CVE-2025-0731 | Medium | 6.5 | 2025-02-26 | An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the securi… |
CVE-2025-22881 | High | 7.8 | 2025-02-26 | Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target v… |
CVE-2025-22869 | High | 7.5 | 2025-02-26 | SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at… |