6722 matches found
CVE-2025-21859
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fmidi: fmidicomplete to call queuework When using USB MIDI, a lock is attempted to be acquired twice through a re-entrant call to fmiditransmit, causing a deadlock. Fix it by using queuework to schedule the inner...
CVE-2025-21844
In the Linux kernel, the following vulnerability has been resolved: smb: client: Add check for nextbuffer in receiveencryptedstandard Add check for the return value of cifsbufget and cifssmallbufget in receiveencryptedstandard to prevent null pointer dereference...
CVE-2025-20209 Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability
A vulnerability in the Internet Key Exchange version 2 IKEv2 function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An...
CVE-2025-1683
creationtimestamp| type| source ---|---|--- 2025-03-12 15:44:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114150229721725855 2025-03-12 17:01:11+00:00| seen| Telegram/MveSXve5Hx1iuO32dm7mrnWq9NYxtXsFLG2c04SagyG1F4 2025-03-12 17:41:38+00:00| seen|...
CVE-2025-21862
In the Linux kernel, the following vulnerability has been resolved: dropmonitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock bad magic on CPU1, syz-executor.0/7995 lock: 0xffff88805303f3e0, .magic: 00000000, .owner: /-1, .ownercpu: 0 CPU: 1 PID: 7995 Comm...
CVE-2025-21853
In the Linux kernel, the following vulnerability has been resolved: bpf: avoid holding freezemutex during mmap operation We use map-freezemutex to prevent races between mapfreeze and memory mapping BPF map contents with writable permissions. The way we naively do this means we'll hold freezemutex...
CVE-2025-21845
In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: sst: Fix SST write failure 'commit 18bcb4aa54ea "mtd: spi-nor: sst: Factor out common write operation to sstnorwritedata"' introduced a bug where only one byte of data is written, regardless of the number of bytes...
CVE-2025-21850
In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter protects pending I/O, and we can only safely diable the namespace once the counter drop to zero. Otherwise we end up with a crash when running...
CVE-2025-21847
CVE-2025-21847 concerns the Linux kernel ASoC: SOF path — stream-ipc handling. The root cause is a missing NULL check for sps->cstream in sof_ipc_msg_data(), which can lead to a NULL pointer dereference if sps->stream is NULL or cstream is NULL. The issue is mitigated by the published patch...
CVE-2025-21847 ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: stream-ipc: Check for cstream nullity in sofipcmsgdata The nullity of sps-cstream should be checked similarly as it is done in sofsetstreamdataoffset function. Assuming that it is not NULL if sps-stream is NULL is...
CVE-2025-26260
Plenti = 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution...
CVE-2025-28929
CVE-2025-28929 relates to the WordPress Tabbed Login Widget (versions
CVE-2025-2023 Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability
Ashlar-Vellum Cobalt LI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must vis...
CVE-2025-211996
creationtimestamp| type| source ---|---|--- 2025-03-11 17:45:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0081...
CVE-2025-240757
creationtimestamp| type| source ---|---|--- 2025-03-11 17:44:43+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0080...
CVE-2025-24453
CVE-2025-24453 affects Adobe InDesign Desktop (ID20.1, ID19.5.2 and earlier) with a heap-based buffer overflow that can lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Several sources corroborate this issue and note affect...
CVE-2024-32123
creationtimestamp| type| source ---|---|--- 2025-03-11 17:37:47+00:00| seen| https://t.me/cvedetector/20100 2025-03-11 18:06:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lk4nsrk2m22x 2025-08-13 13:26:34+00:00| seen| MISP/682bdba3-46b7-4a8f-b7be-c6bf4b4f9868...
CVE-2025-24994 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
...