CVE-2025-21939

CVE-2025-21939 affects the Linux kernel DRM: XEHmm code path. The root cause is dereference of struct page pointers obtained from hmm_range_fault() without holding the notifier lock (and with an invalid/unstable seqno), risking access to pages not owned by the kernel during sg-table construction....

CVE-2025-21939 drm/xe/hmm: Don't dereference struct page pointers without notifier lock

In the Linux kernel, the following vulnerability has been resolved: drm/xe/hmm: Don't dereference struct page pointers without notifier lock The pnfs that we obtain from hmmrangefault point to pages that we don't have a reference on, and the guarantee that they are still in the cpu page-tables is...

CVE-2025-21933 arm: pgtable: fix NULL pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...

CVE-2025-21933 arm: pgtable: fix NULL pointer dereference issue

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...

CVE-2025-21903 mctp i3c: handle NULL header address

In the Linux kernel, the following vulnerability has been resolved: mctp i3c: handle NULL header address daddr can be NULL if there is no neighbour table entry present, in that case the tx packet should be dropped. saddr will usually be set by MCTP core, but check for NULL in case a packet is...

CVE-2025-31757

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View free-product-table-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Free Woocommerce Product Table View: from n/a through = 1.78...

CVE-2025-31757

No technical details about CVE-2025-31757 are present in the provided documents. Technical specifics (affected product/version, root cause, impact, fixes) are not available here. Monitor for updates from trusted sources.

CVE-2025-31757 WordPress Free Woocommerce Product Table View plugin <= 1.78 - Broken Access Control vulnerability

Missing Authorization vulnerability in BinaryCarpenter Free Woocommerce Product Table View allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Free Woocommerce Product Table View: from n/a through 1.78...

CVE-2025-3041

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

CVE-2025-3042 Project Worlds Online Time Table Generator updateprofile.php unrestricted upload

A vulnerability classified as critical was found in Project Worlds Online Time Table Generator 1.0. This vulnerability affects unknown code of the file /student/updateprofile.php. The manipulation of the argument pic leads to unrestricted upload. The attack can be initiated remotely. The exploit...

CVE-2025-3042

CVE-2025-3042 affects Project Worlds Online Time Table Generator 1.0. The vulnerability resides in /student/updateprofile.php where manipulating the pic parameter enables unrestricted file upload, with a remote attack possible and public disclosure of the exploit. Multiple sources corroborate the...

PT-2025-27981

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A double free issue in the exfat module has been resolved. The double free could occur in a specific path involving the exfat create upcase table, exfat free upcase table, exfat load...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the net/mlx5 module not properly handling errors in mlx5chainscreatetable...

PT-2025-14314 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.13.7 Description: A NULL pointer dereference issue has been identified in the Linux kernel. The issue occurs when the update mmu cache range function is called by update mmu cache, and the vmf parameter is NUL...

Projectworlds Online Time Table Generator 代码问题漏洞

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. A code issue vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from an incorrect manipulation of the parameter pic resulting in unlimited uploads...

PT-2025-14010 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical vulnerability was found in the Project Worlds Online Time Table Generator. This issue affects unknown code of the file /student/updateprofile.php. The manipulation...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference issue in the ARM architecture page table handling...

WordPress plugin Free Woocommerce Product Table View 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Free Woocommerce Product...

CVE-2025-3041

CVE-2025-3041 affects Project Worlds Online Time Table Generator 1.0. A vulnerability in the /admin/updatestudent.php endpoint allows unrestricted upload via the pic parameter. Exploitation can be remote and the exploit has been disclosed publicly. Connected sources indicate no public details on ...

CVE-2025-3040

A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addstudent.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotel...