23601 matches found
CVE-2025-37862 HID: pidff: Fix null pointer dereference in pidff_find_fields
In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...
CVE-2025-37858
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer overflow in AG size calculation The JFS filesystem calculates allocation group AG size using 1 2TB aggregates on 32-bit systems, this 32-bit shift operation causes undefined behavior and improper AG sizing...
CVE-2025-37858 fs/jfs: Prevent integer overflow in AG size calculation
In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer overflow in AG size calculation The JFS filesystem calculates allocation group AG size using 1 2TB aggregates on 32-bit systems, this 32-bit shift operation causes undefined behavior and improper AG sizing...
CVE-2025-37848
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS IOCTLs are in progress. Failed suspend will call ivpumscleanup that would try to acquire filepriv-mslock, which is already held by the IOCT...
CVE-2025-37848 accel/ivpu: Fix PM related deadlocks in MS IOCTLs
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix PM related deadlocks in MS IOCTLs Prevent runtime resume/suspend while MS IOCTLs are in progress. Failed suspend will call ivpumscleanup that would try to acquire filepriv-mslock, which is already held by the IOCT...
CVE-2025-37847
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix deadlock in ivpumscleanup Fix deadlock in ivpumscleanup by preventing runtime resume after filepriv-mslock is acquired. During a failure in runtime resume, a cold boot is executed, which calls ivpumscleanupall. Th...
CVE-2025-37840 mtd: rawnand: brcmnand: fix PM resume warning
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...
CVE-2025-37840
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nandoperation that checks chip select field : WARNONop-cs = nanddevntargets&chip-base 14.588522 ----------...
CVE-2025-37835
Removed by vendor...
CVE-2025-4461
creationtimestamp| type| source ---|---|--- 2025-05-09 06:36:02+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopqvumrioc2 2025-05-09 08:41:02+00:00| seen| https://t.me/cvedetector/24903 2025-05-09 16:25:07+00:00|...
CVE-2025-4465
creationtimestamp| type| source ---|---|--- 2025-05-09 06:25:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15680 2025-05-09 06:35:58+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lopqvivq27o2 2025-05-09...
CVE-2025-4457 Project Worlds Car Rental Project approve.php sql injection
A vulnerability classified as critical was found in Project Worlds Car Rental Project 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has be...
CVE-2025-47735
CVE-2025-47735 affects the Rust wgp crate (versions 0.2.0 and earlier). The root cause is missing drop_slow thread synchronization in inner::drop (inner.rs), leading to a race condition in multithreaded contexts. Exploit details are not provided in the documents; remediation references suggest av...
CVE-2025-28201
CVE-2025-28201 affects Victure RX1800 router (EN_V1.0.0_r12_110933). Multiple sources state physically proximate attackers can execute arbitrary code or gain root access. CVSSv3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=H/I=H/A=H; confidentiality, integrity, and availability are all High. No patch/fix informa...
CVE-2025-46189
SourceCodester Client Database Management System 1.0 is affected by a SQL Injection in user_order_customer_update.php via the order_id POST parameter. Root cause: improper handling/validation of the order_id parameter. Impact: potential unauthorized access/modification of the database (per CVSS 3...
CVE-2025-47735
inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks dropslow thread synchronization...
CVE-2025-28202
Incorrect access control in Victure RX1800 ENV1.0.0r12110933 allows attackers to enable SSH and Telnet services without authentication...
CVE-2025-46193
SourceCodester Client Database Management System 1.0 is vulnerable to Remote code execution via Arbitrary file upload in userproposalupdateorder.php...
