CVE-2025-38594

In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix UAF on sva unbind with pending IOPFs Commit 17fce9d2336d "iommu/vt-d: Put iopf enablement in domain attach path" disables IOPF on device by removing the device from its IOMMU's IOPF queue when the last IOPF-capabl...

CVE-2025-38564

In the Linux kernel, the following vulnerability has been resolved: perf/core: Handle buffer mapping fail correctly in perfmmap After successful allocation of a buffer or a successful attachment to an existing buffer perfmmap tries to map the buffer read only into the page table. If that fails, t...

CVE-2025-54880

Mermaid is a JavaScript based diagramming and charting tool that uses Markdown-inspired text definitions and a renderer to create and modify complex diagrams. In the default configuration of mermaid 11.9.0 and earlier, user supplied input for architecture diagram icons is passed to the d3 html...

CVE-2025-38576

In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: Make EEH driver device hotplug safe Multiple race conditions existed between the PCIe hotplug driver and the EEH driver, leading to a variety of kernel oopses of the same general nature: A second class of oops is als...

CVE-2025-38559

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/pmt: fix a crashlog NULL pointer access Usage of the intelpmtread for binary sysfs, requires a pcidev. The current use of the endpoint value is only valid for telemetry endpoint usage. Without the ep, the...

CVE-2025-38612

In the Linux kernel, the following vulnerability has been resolved: staging: fbtft: fix potential memory leak in fbtftframebufferalloc In the error paths after fbinfo structure is successfully allocated, the memory allocated in fbdeferredioinit for info-pagerefs is not freed. Fix that by adding t...

CVE-2025-38603

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-38584

In the Linux kernel, the following vulnerability has been resolved: padata: Fix pd UAF once and for all There is a race condition/UAF in padatareorder that goes back to the initial commit. A reference count is taken at the start of the process in padatadoparallel, and released at the end in...

WordPress Link View plugin <= 0.8.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan Patchstack Alliance in WordPress Plugin Link View versions = 0.8.0...

CVE-2025-8783

creationtimestamp| type| source ---|---|--- 2025-08-19 14:23:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwr4ha3epc27...

CVE-2023-21321

creationtimestamp| type| source ---|---|--- 2025-08-19 09:45:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lwqmvec3dq22...

WordPress Markup Markdown plugin <= 3.20.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by JeonKim in WordPress Plugin Markup Markdown versions = 3.20.6...

PT-2025-34271 · Undefined · Undefined

CVE-2025-55153 - Apache HTTP Server XML Entity Injection CVE ID : CVE-2025-55153 Published : Aug. 19, 2025, 6:15 p.m. | 1 hour, 59 minutes ago Description : Rejected reason: This CVE is a duplicate of another CVE. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected...

PT-2025-33837 · Undefined · Undefined

CVE-2025-57725 - Apache HTTP Server Information Disclosure CVE ID : CVE-2025-57725 Published : Aug. 19, 2025, 3:15 a.m. | 57 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

HUSTOJ security vulnerabilities

HUSTOJ is a popular OJ system by the individual developer Zhang Haobin zhblue in China. A security vulnerability exists in HUSTOJ version 2025-01-31, which stems from parameter injection and could lead to cross-site scripting attacks...

GHSA-MP56-7VRW-QXVF

creationtimestamp| type| source ---|---|--- 2025-08-18 21:12:49+00:00| published-proof-of-concept| https://t.me/cKure/15266 2026-07-21 13:00:07+00:00| published-proof-of-concept| https://t.me/ckuRED/643 2026-07-22 00:00:24+00:00| published-proof-of-concept| https://t.me/ckuRED/643...

CVE-2025-55587

creationtimestamp| type| source ---|---|--- 2025-08-18 19:38:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115051457254811933...

CVE-2025-54421

creationtimestamp| type| source ---|---|--- 2025-08-18 18:18:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwoz3pl5mb2g...

CVE-2025-36120

creationtimestamp| type| source ---|---|--- 2025-08-18 14:06:13+00:00| seen| Telegram/ZFAhKaQ5x80bL7hByvF9h0qIvrR0A2DOR6YW6YJRgsNRXZM...

CVE-2025-38495

creationtimestamp| type| source ---|---|--- 2025-08-18 12:57:24+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwoh5wd43k2k 2025-08-18 14:25:55+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwom472ww22k 2025-08-18 17:47:35+00:00| seen|...