CVE-2023-54003

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when createah fails If AH create request fails, release sgidattr to avoid GID entry referrence leak reported while releasing GID table...

CVE-2023-54003 RDMA/core: Fix GID entry ref leak when create_ah fails

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix GID entry ref leak when createah fails If AH create request fails, release sgidattr to avoid GID entry referrence leak reported while releasing GID table...

CVE-2022-50703 soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: smsm: Fix refcount leak bugs in qcomsmsmprobe There are two refcount leak bugs in qcomsmsmprobe: 1 The 'localnode' is escaped out from foreachchildofnode as the break of iteration, we should call ofnodeput for it in...

CVE-2025-68370 coresight: tmc: add the handle of the event to the path

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential for retrieving the AUXEVENT of each CPU and is required in perf mode. It has been added to the coresightpath so that dependent devices can access it...

CVE-2025-68370

The CVE-2025-68370 entry concerns a Linux kernel CoreSight TMC issue where the event handle was not exposed in the coresight_path, hindering AUX_EVENT retrieval for perftools in perf mode. The vulnerability could trigger an oops (kernel paging fault) when exercising the affected PERF event (examp...

CVE-2025-68370 coresight: tmc: add the handle of the event to the path

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential for retrieving the AUXEVENT of each CPU and is required in perf mode. It has been added to the coresightpath so that dependent devices can access it...

PT-2025-52906

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s coresight component, specifically within the tmc subsystem. The issue stems from a missing handle for events, which is crucial for retrieving auxiliar...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a failure to release a global identifier entry reference after a failed address handle creation, which could lea...

PT-2025-53196

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A condition exists in the Linux kernel where a race between inotify freeing mark and inotify handle inode event can lead to the reporting of an event with an invalid watch descriptor wd ...

CVE-2025-14955 Open5GS PFCP handler.c ogs_pfcp_handle_create_pdr initialization

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogspfcphandlecreatepdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation results in improper initialization. It is possible to launch the attack remotely. This attack is...

CVE-2025-14910 Edimax BR-6208AC FTP Daemon Service handle_retr path traversal

A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handleretr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is...

Edimax BR-6208AC 路径遍历漏洞

The Edimax BR-6208AC is a wireless router from Edimax Taiwan, China. A path traversal vulnerability exists in the Edimax BR-6208AC version 1.02, which originates from a misbehavior of the function handleretr in the FTP Daemon Service component, and could lead to a path traversal attack...

CVE-2025-14364

The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handlerequest function in all versions up to, and including, 2.0.8. This makes it possible for authenticated...

CVE-2025-14364

CVE-2025-14364 affects the WordPress Demo Importer Plus plugin (versions

EUVD-2025-204021

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null...

PT-2025-52211

The Demo Importer Plus plugin for WordPress is vulnerable to unauthorized modification of data, loss of data, and privilege escalation due to a missing capability check on the Ajax::handle request function in all versions up to, and including, 2.0.8. This makes it possible for authenticated...

The vulnerability of the nfs_fh_to_dentry() function in the fs/nfs/export.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nfsfhtodentry function in the fs/nfs/export.c component of the Linux operating system is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause service failures...

CVE-2025-13094

The WP3D Model Import Viewer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handleimportfile function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Author-level access and above, to...

EUVD-2025-203227

The WP3D Model Import Viewer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handleimportfile function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Author-level access and above, to...

CVE-2025-13094

The WP3D Model Import Viewer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handleimportfile function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Author-level access and above, to...