9429 matches found
CVE-2025-38187
creationtimestamp| type| source ---|---|--- 2025-07-04 14:22:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114795410424377262...
CVE-2025-38227
In the Linux kernel, the following vulnerability has been resolved: media: vidtv: Terminating the subsequent process of initialization failure syzbot reported a slab-use-after-free Read in vidtvmuxinit. 1 After PSI initialization fails, the si member is accessed again, resulting in this uaf. Afte...
CVE-2025-38201
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: clamp maximum map bucket size to INTMAX Otherwise, it is possible to hit WARNONONCE in kvmallocnodenoprof when resizing hashtable because GFPNOWARN is unset. Similar to: b541ba7d1f5a "netfilter: conntrack...
CVE-2025-38181
creationtimestamp| type| source ---|---|--- 2025-07-04 14:11:44+00:00| seen| https://bsky.app/profile/potato.software/post/3lt5gdhvlyp2h...
CVE-2025-38220
In the Linux kernel, the following vulnerability has been resolved: ext4: only dirty folios when data journaling regular files fstest generic/388 occasionally reproduces a crash that looks as follows: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... Call Trace:...
CVE-2025-38206 exfat: fix double free in delayed_free
In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayedfree The double free could happen in the following path. exfatcreateupcasetable exfatcreateupcasetable : return error exfatfreeupcasetable : free -volutbl exfatloaddefaultupcasetable : return erro...
CVE-2025-38204 jfs: fix array-index-out-of-bounds read in add_missing_indices
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in addmissingindices stbl is s8 but it must contain offsets into slot which can go from 0 to 127. Added a bound check for that error and return -EIO if the check fails. Also make jfsreaddir...
CVE-2025-38178
Removed by vendor...
CVE-2025-02187
creationtimestamp| type| source ---|---|--- 2025-07-04 13:19:22+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lt5dfreuzk2i...
CVE-2025-5920
CVE-2025-5920 affects the WordPress plugin Sharable Password Protected Posts (versions
CVE-2025-53599
creationtimestamp| type| source ---|---|--- 2025-07-04 09:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4viohnzs2p...
CVE-2025-7046
creationtimestamp| type| source ---|---|--- 2025-07-04 07:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4pe4t5ru2u...
BELL-CVE-2025-38107
Bulletin has no description...
CVE-2025-38169
In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch immediately after that state is restored. Systems without SME...
CVE-2025-5953 WP Human Resource Management 2.0.0 - 2.2.17 - Missing Authorization to Authenticated (Employee+) Privilege Escalation via wp_ajax_hrm_insert_employee AJAX Action
The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajaxinsertemployee and updateempoyee functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $POST'role' and, after basic cleaning via...
CVE-2025-38155
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915mmiowedinit devmioremap returns NULL on error. Currently, mt7915mmiowedinit does not check for this case, which results in a NULL pointer dereference. Prevent null pointer dereferen...
CVE-2025-38165
In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...
CVE-2025-6072
creationtimestamp| type| source ---|---|--- 2025-07-03 19:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3ifof6in2r 2025-07-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-02...
CVE-2025-38124
A denial of service vulnerability has been discovered in the Linux kernel's UDP Generic Segmentation Offload GSO functionality. This flaw allows a local, unprivileged user to trigger a kernel crash by generating UDP packets with a specially malformed fraglist geometry. Successful exploitation of...