CVE-2025-38206 exfat: fix double free in delayed_free

In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayedfree The double free could happen in the following path. exfatcreateupcasetable exfatcreateupcasetable : return error exfatfreeupcasetable : free -volutbl exfatloaddefaultupcasetable : return erro...

CVE-2025-38204 jfs: fix array-index-out-of-bounds read in add_missing_indices

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in addmissingindices stbl is s8 but it must contain offsets into slot which can go from 0 to 127. Added a bound check for that error and return -EIO if the check fails. Also make jfsreaddir...

CVE-2025-38178

Removed by vendor...

CVE-2025-02187

creationtimestamp| type| source ---|---|--- 2025-07-04 13:19:22+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lt5dfreuzk2i...

CVE-2025-5920

The Sharable Password Protected Posts WordPress plugin (versions prior to 1.1.1 ) contains an information disclosure vulnerability. The root cause is that the REST API exposes a secret key, which an unauthenticated attacker can then use in a GET parameter to gain unauthorized access to password-p...

CVE-2025-53599

creationtimestamp| type| source ---|---|--- 2025-07-04 09:10:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4viohnzs2p...

CVE-2025-7046

creationtimestamp| type| source ---|---|--- 2025-07-04 07:20:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt4pe4t5ru2u...

BELL-CVE-2025-38107

Bulletin has no description...

CVE-2025-38169

In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD state may be erroneously clobbered during a context switch immediately after that state is restored. Systems without SME...

CVE-2025-5953 WP Human Resource Management 2.0.0 - 2.2.17 - Missing Authorization to Authenticated (Employee+) Privilege Escalation via wp_ajax_hrm_insert_employee AJAX Action

The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajaxinsertemployee and updateempoyee functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $POST'role' and, after basic cleaning via...

CVE-2025-38155

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: Fix null-ptr-deref in mt7915mmiowedinit devmioremap returns NULL on error. Currently, mt7915mmiowedinit does not check for this case, which results in a NULL pointer dereference. Prevent null pointer dereferen...

CVE-2025-38165

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix panic when calling skblinearize The panic can be reproduced by executing the command: ./bench sockmap -c 2 -p 1 -a --rx-verdict-ingress --rx-strp 100000 Then a kernel panic was captured: ''' 657.460555 kernel BU...

CVE-2025-6072

creationtimestamp| type| source ---|---|--- 2025-07-03 19:43:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3ifof6in2r 2025-07-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-02...

CVE-2025-38124

A denial of service vulnerability has been discovered in the Linux kernel's UDP Generic Segmentation Offload GSO functionality. This flaw allows a local, unprivileged user to trigger a kernel crash by generating UDP packets with a specially malformed fraglist geometry. Successful exploitation of...

CVE-2025-53502

creationtimestamp| type| source ---|---|--- 2025-07-03 19:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3htrhkzq2a...

CVE-2025-38101

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ringbuffersubbuforderset Enlarge the critical section in ringbuffersubbuforderset to ensure that error handling takes place with per-buffer mutex held, thus preventing list corruption and other...

CVE-2025-38144

In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovose30wdt: Fix possible devmioremap NULL pointer dereference in lenovose30wdtprobe devmioremap returns NULL on error. Currently, lenovose30wdtprobe does not check for this case, which results in a NULL pointer...

CVE-2025-38156

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: Fix null-ptr-deref in mt7996mmiowedinit devmioremap returns NULL on error. Currently, mt7996mmiowedinit does not check for this case, which results in a NULL pointer dereference. Prevent null pointer dereferen...

CVE-2025-53370

creationtimestamp| type| source ---|---|--- 2025-07-03 17:14:50+00:00| published-proof-of-concept| https://github.com/StarCitizenTools/mediawiki-skins-Citizen/security/advisories/GHSA-prmv-7r8c-794g 2025-07-03 23:51:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lt3wbqcht42a...

CVE-2025-48939 tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript

tarteaucitron.js is a compliant and accessible cookie banner. Prior to version 1.22.0, a vulnerability was identified in tarteaucitron.js where document.currentScript was accessed without verifying that it referenced an actual element. If an attacker injected an HTML element, it could clobber the...