CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11233 matches found

CVE•added 2025/10/04 7:30 a.m.•64 views

CVE-2025-39934

CVE-2025-39934: Linux kernel drm: bridge: anx7625 fixes a NULL pointer dereference when an IRQ fires before resource initialization, potentially accessing uninitialized I2C tcpc_client data. The NVD entry notes a MEDIUM base score (5.5) with LOCAL attack vector and LOW PR, HIGH impact on availabi...

5.5CVSS5.9AI score0.00145EPSS

SaveExploits0References6Affected Software1

Cvelist•added 2025/10/04 7:30 a.m.•38 views

CVE-2025-39934 drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...

0.00145EPSS

SaveExploits0References6

osv_cve•added 2025/10/04 7:30 a.m.•25 views

CVE-2025-39931 crypto: af_alg - Set merge to zero early in af_alg_sendmsg

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Set merge to zero early in afalgsendmsg If an error causes afalgsendmsg to abort, ctx-merge may contain a garbage value from the previous loop. This may then trigger a crash on the next entry into afalgsendmsg whe...

7.8CVSS6.5AI score

SaveExploits0References13

EUVD•added 2025/10/04 3:32 a.m.•14 views

EUVD-2025-32421

The Integrate Dynamics 365 CRM plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.0.9. This is due to missing capability checks and nonce verification on functions hooked to 'init'. This makes it possible for unauthenticated attackers to deactivate t...

6.5CVSS5.2AI score0.00273EPSS

SaveExploits0References5

CVE•added 2025/10/04 2:24 a.m.•44 views

CVE-2025-10746

CVE-2025-10746 – Integrate Dynamics 365 CRM plugin (WordPress) affects all versions up to 1.0.9. Root cause: missing capability checks and nonce verification on functions hooked to init, enabling unauthenticated access. Impact (per sources): unauthenticated attackers can deactivate the plugin, ta...

6.5CVSS5.8AI score0.00273EPSS

SaveExploits0References4

osv_rlsa•added 2025/10/04 12:11 a.m.•19 views

RLSA-2025:7043 Moderate: microcode_ctl security update

The microcodectl packages provide microcode updates for Intel and AMD processors. Security Fixes: microcodectl: Improper input validation in UEFI firmware CVE-2024-28047 microcodectl: Insufficient granularity of access control in UEFI firmware CVE-2024-39279 microcodectl: mproper initialization i...

6.5CVSS6.5AI score0.0025EPSS

SaveExploits0References4

Positive Technologies•added 2025/10/04 12:00 a.m.•17 views

PT-2025-40660

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the cpufreq subsystem. Specifically, in cpufreq policy alloc, an uninitialized completion is called within cpufreq sysfs release when kobject...

6.1AI score0.00156EPSS

SaveExploits0References9

EUVD•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-21796