UBUNTU-CVE-2025-37980

In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blkregisterqueue error path When registering a queue fails after blkmqsysfsregister is successful but the function later encounters an error, we need to clean up the blkmqsysfs resources. Add the missi...

CVE-2025-4736

A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

PHPGurukul Daily Expense Tracker 注入漏洞

PHPGurukul Daily Expense Tracker is a daily expense tracker from PHPGurukul. An injection vulnerability exists in version 1.1 of PHPGurukul Daily Expense Tracker, which stems from improper handling of the parameter email in the file /register.php, which could lead to SQL injection...

PT-2025-30842

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's RISC-V vector implementation related to context save and restore operations with xtheadvector. Previously, only registers v0-v7 were correctly saved a...

Privacy-Preserving Runtime Verification

Runtime verification offers scalable solutions to improve the safety and reliability of systems. However, systems that require verification or monitoring by a third party to ensure compliance with a specification might contain sensitive information, causing privacy concerns when usual runtime...

kernel: driver core: bus: Fix double free in driver API bus_register()

A flaw was found in the Linux kernel, specifically within the driver core bus API. An issue in the busregister function can lead to a double free vulnerability. A local attacker with administrative privileges could exploit this to cause memory corruption, potentially resulting in a denial of...

kernel: usb: dwc3: fix fault at system suspend if device was already runtime suspended

A flaw was found in the Linux kernel's USB DesignWare Core 3 dwc3 driver. When a system suspend is initiated while the USB controller is already in a low-power runtime suspended state, the driver attempts to access unpowered device hardware registers, leading to a kernel crash. A local user with...

kernel: s390: avoid using global register for current_stack_pointer

In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for currentstackpointer Commit 30de14b1884b "s390: currentstackpointer shouldn't be a function" made currentstackpointer a global register variable like on many other architectures. Unfortunately...

kernel: hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails

A flaw was found in the hwmon hardware monitoring subsystem of the Linux kernel, specifically within the ibmpex driver. This vulnerability is a Use-After-Free UAF error, which occurs when the system attempts to use memory that has already been released. An attacker with administrative privileges...

CVE-2025-4474

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the fedadminsettingformfunction function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the...

CVE-2025-4549

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-4549 Campcodes Online Food Ordering System register-router.php sql injection

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been...

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the Campcodes Online Food Ordering System, which originates from a SQL injection due to incorrect manipulation of the parameter Name in the file...

CVE-2025-4549: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /routers/register-router.php. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been...

SUSE CVE-2025-37846

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...

AZL-70147 CVE-2025-37877 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: iommu: Clear iommu-dma ops on cleanup If iommudeviceregister encounters an error, it can end up tearing down already-configured groups and default domains, however this currently still leaves devices hooked up to iommu-dma and ev...

DEBIAN-CVE-2025-37870

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: prevent hang on link training fail Why When link training fails, the phy clock will be disabled. However, in enablestreams, it is assumed that link training succeeded and the mux selects the phy clock, causing a...

DEBIAN-CVE-2025-37846

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...

CVE-2025-37846

In the Linux kernel, the following vulnerability has been resolved: arm64: mops: Do not dereference src reg for a set operation The source register is not used for SET and reading it can result in a UBSAN out-of-bounds array access error, specifically when the MOPS exception is taken from a SET...

DEBIAN-CVE-2025-37836

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pciregisterhostbridge If deviceregister fails, call putdevice to give up the reference to avoid a memory leak, per the comment at deviceregister. Found by code review. bhelgaas: squash Dan Carpenter's...