2025 CVEs (page 69)
Page 69 of 434 — CVEs published in 2025, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-68166 | Medium | 5.4 | 2025-12-16 | In JetBrains TeamCity before 2025.11 a DOM-based XSS was possible on the OAuth connections tab |
CVE-2025-68165 | Medium | 5.4 | 2025-12-16 | In JetBrains TeamCity before 2025.11 reflected XSS was possible on VCS Root setup |
CVE-2025-68164 | Low | 2.7 | 2025-12-16 | In JetBrains TeamCity before 2025.11 port enumeration was possible via the Perforce connection test |
CVE-2025-68163 | Low | 3.5 | 2025-12-16 | In JetBrains TeamCity before 2025.11 stored XSS was possible on agentpushInstall page |
CVE-2025-68162 | Low | 2.7 | 2025-12-16 | In JetBrains TeamCity before 2025.11 maven embedder allowed loading extensions via project configuration |
CVE-2025-65427 | Medium | 6.5 | 2025-12-16 | An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing… |
CVE-2025-65319 | Critical | 9.1 | 2025-12-16 | When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-Web tag, which allows… |
CVE-2025-65318 | Critical | 9.1 | 2025-12-16 | When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows… |
CVE-2025-64012 | Medium | 4.3 | 2025-12-16 | InvoicePlane commit debb446c is vulnerable to Incorrect Access Control. The invoices/view handler fails to verify ownership before returning invoice data. |
CVE-2025-62329 | Medium | 5.0 | 2025-12-16 | HCL DevOps Deploy / HCL Launch is susceptible to a race condition in http-session client-IP binding enforcement which may allow a session to be briefly reused… |
CVE-2025-14432 | Medium | 4.9 | 2025-12-16 | In limited scenarios, sensitive data might be written to the log file if an admin uses Microsoft Teams Admin Center (TAC) to make device configuration changes… |
CVE-2025-10450 | High | 7.5 | 2025-12-16 | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.Th… |
CVE-2025-68281 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list "struct sdca_control" declare… | |
CVE-2025-68266 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that S_IFMT bits of… | |
CVE-2025-68265 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin r… |
CVE-2025-68264 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size before write operations The cached ei->i_inline_size can b… | |
CVE-2025-68263 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits for a… |
CVE-2025-68262 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: crypto: zstd - fix double-free in per-CPU stream cleanup The crypto/zstd module has a dou… | |
CVE-2025-68261 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() Fix a race between i… |
CVE-2025-68260 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix race condition on death_list Rust Binder contains the following unsafe o… |
CVE-2025-68259 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a s… | |
CVE-2025-68258 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: comedi: multiq3: sanitize config options in multiq3_attach() Syzbot identified an issue [… | |
CVE-2025-68257 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: comedi: check device's attached status in compat ioctls Syzbot identified an issue [1] th… | |
CVE-2025-68256 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser The Information Element… |
CVE-2025-68255 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing The Supported Rate… |
CVE-2025-68254 | High | 7.1 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing The Extended Suppor… |
CVE-2025-68253 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mm: don't spin in add_stack_record when gfp flags don't allow syzbot was able to find the… | |
CVE-2025-68252 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup In fastrpc_map_lookup, dma_b… | |
CVE-2025-68251 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an i… | |
CVE-2025-68250 | High | 8.2 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: hung_task: fix warnings caused by unaligned lock pointers The blocker tracking mechanism… |
CVE-2025-68249 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: most: usb: hdm_probe: Fix calling put_device() before device initialization The early err… | |
CVE-2025-68248 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: vmw_balloon: indicate success when effectively deflating during migration When migrating… | |
CVE-2025-68247 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: posix-timers: Plug potential memory leak in do_timer_create() When posix timer creation i… | |
CVE-2025-68246 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connect… |
CVE-2025-68245 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: netpoll: fix incorrect refcount handling causing incorrect cleanup commit efa95b01da… | |
CVE-2025-68244 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD On completion of i915_… | |
CVE-2025-68243 | High | 7.0 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: NFS: Check the TLS certificate fields in nfs_match_client() If the TLS security policy is… |
CVE-2025-68242 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: NFS: Fix LTP test failures when timestamps are delegated The utimes01 and utime06 tests f… | |
CVE-2025-68241 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe The sit driver's packe… |
CVE-2025-68240 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: avoid having an active sc_timer before freeing sci Because kthread_stop did not s… | |
CVE-2025-68239 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm_register_… | |
CVE-2025-68238 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: fix DMA device NULL pointer dereference The DMA device pointer `dm… | |
CVE-2025-68237 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len" variable… | |
CVE-2025-68236 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) According to UFS spec… | |
CVE-2025-68235 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot nvkm_falcon_fw::boot is all… | |
CVE-2025-68234 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp retriving… |
CVE-2025-68233 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Add call to put_pid() Add a call to put_pid() corresponding to get_task_pid()… | |
CVE-2025-68232 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: veth: more robust handing of race to avoid txq getting stuck Commit dc82a33297fc ("veth… |
CVE-2025-68231 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mm/mempool: fix poisoning order>0 pages with HIGHMEM The kernel test has reported: BUG… | |
CVE-2025-68230 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough On PF passthrough envi… | |
CVE-2025-68229 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() If the allocation of… | |
CVE-2025-68228 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/plane: Fix create_in_format_blob() return value create_in_format_blob() is either sup… | |
CVE-2025-68227 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix proto fallback detection with BPF The sockmap feature allows bpf syscall from… | |
CVE-2025-68226 | High | 8.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfids_invalidation_worker() The previous commit b… |
CVE-2025-68225 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: lib/test_kho: check if KHO is enabled We must check whether KHO is enabled prior to issui… | |
CVE-2025-68223 | Medium | 5.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Delete the attempt to… |
CVE-2025-68222 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc s32_pinctrl_desc is allocate… | |
CVE-2025-68221 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mptcp: fix address removal logic in mptcp_pm_nl_rm_addr Fix inverted WARN_ON_ONCE conditi… | |
CVE-2025-68220 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error Make… | |
CVE-2025-68219 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix memory leak in smb3_fs_context_parse_param error path Add proper cleanup of ctx… | |
CVE-2025-68218 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases nvme/014… |
CVE-2025-68217 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasus_notetaker dr… | |
CVE-2025-68216 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch… | |
CVE-2025-68215 | High | 7.0 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error path Improve the cleanup on releasing PTP… |
CVE-2025-68214 | Medium | 4.7 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition… |
CVE-2025-68213 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vport_config NULL pointer deref in remove Attempting to remove the dri… | |
CVE-2025-68212 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmount_string() In statmount_string(), most flags assi… |
CVE-2025-68211 | Medium | 5.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, sca… |
CVE-2025-68210 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompre… | |
CVE-2025-68209 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completion function are as… | |
CVE-2025-68208 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth in widen_imprecise_scalars() The usage pat… |
CVE-2025-68207 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker… |
CVE-2025-68206 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be… |
CVE-2025-68205 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver After restructuring and splitti… | |
CVE-2025-68204 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fix genpd leak on provider registration failure If of_genpd_add_prov… | |
CVE-2025-68202 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix unsafe locking in the scx_dump_state() For built with CONFIG_PREEMPT_RT=y… | |
CVE-2025-68201 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: remove two invalid BUG_ON()s Those can be triggered trivially by userspace. | |
CVE-2025-68200 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot found that cls_bpf_classify() is able to cha… | |
CVE-2025-68199 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext When… | |
CVE-2025-68198 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: crash: fix crashkernel resource shrink When crashkernel is configured with a high reserva… | |
CVE-2025-68197 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() With older FW, we may… | |
CVE-2025-68196 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Cache streams targeting link when performing LT automation [WHY] Last LT… | |
CVE-2025-68195 | High | 7.1 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add missing terminator for zen5_rdseed_microcode Running x86_match_min_micro… |
CVE-2025-68194 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syzbot is reporting that imon has three probl… | |
CVE-2025-68193 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to safely tear down CT When a buffer object (BO) is a… | |
CVE-2025-68192 | Critical | 9.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Raw IP packets have n… |
CVE-2025-68191 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to… | |
CVE-2025-68190 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() kcal… | |
CVE-2025-68189 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also have obj->resv != &obj… |
CVE-2025-68188 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair… | |
CVE-2025-68187 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: net: mdio: Check regmap pointer returned by device_node_to_regmap() The call to device_no… | |
CVE-2025-68186 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up The funct… | |
CVE-2025-68185 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing Theoreti… | |
CVE-2025-68184 | High | 7.1 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek DRM driver Commit c410fa9b07c3 ("drm/media… |
CVE-2025-68183 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when bo… |
CVE-2025-68182 | High | 7.5 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() This code frees "lin… |
CVE-2025-68181 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since the allocation of the drivers main struct… |
CVE-2025-68180 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL deref in debugfs odm_combine_segments When a connector is conne… | |
CVE-2025-68179 | High | 7.8 | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP As reported by Luiz Capitulino enabling… |
CVE-2025-68178 | | 2025-12-16 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configuring policy Following deadlock can be trig… |