Latest CVE Feed
- 
                                
                                
6.5
MEDIUMCVE-2025-61224
Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitrary code via the q parameter... Read more
Affected Products :- Published: Oct. 06, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Cross-Site Scripting
 
 - 
                                
                                
9.6
CRITICALCVE-2025-59159
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is s... Read more
Affected Products :- Published: Oct. 06, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Misconfiguration
 
 - 
                                
                                
9.3
CRITICALCVE-2025-52472
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the `ord... Read more
Affected Products : xwiki- Published: Oct. 06, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Injection
 
 - 
                                
                                
0.0
NACVE-2022-50541
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow UDMA_CHAN_RT_*BCNT_REG stores the real-time channel bytecount statistics. These registers are 32-bit hardwar... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Misconfiguration
 
 - 
                                
                                
0.0
NACVE-2023-53639
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: reduce WARN to dev_dbg() in callback The warn is triggered on a known race condition, documented in the code above the test, that is correctly handled. Using WARN() hinde... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Race Condition
 
 - 
                                
                                
0.0
NACVE-2023-53636
In the Linux kernel, the following vulnerability has been resolved: clk: microchip: fix potential UAF in auxdev release callback Similar to commit 1c11289b34ab ("peci: cpu: Fix use-after-free in adev_release()"), the auxiliary device is not torn down in... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2023-53633
In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix a leak in map_user_pages() If get_user_pages_fast() allocates some pages but not as many as we wanted, then the current code leaks those pages. Call put_page() on the p... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2023-53626
In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Race Condition
 
 - 
                                
                                
0.0
NACVE-2023-53623
In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() The si->lock must be held when deleting the si from the available list. Otherwise, another thread can re-add the... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Race Condition
 
 - 
                                
                                
0.0
NACVE-2023-53620
In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recovery_active' to show user a progress bar like following: [============>........] resync = 61.4% ... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Denial of Service
 
 - 
                                
                                
0.0
NACVE-2022-50548
In the Linux kernel, the following vulnerability has been resolved: media: i2c: hi846: Fix memory leak in hi846_parse_dt() If any of the checks related to the supported link frequencies fail, then the V4L2 fwnode resources don't get released before retu... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2022-50540
In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom-adm: fix wrong sizeof config in slave_config Fix broken slave_config function that uncorrectly compare the peripheral_size with the size of the config pointer instead of... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2022-50539
In the Linux kernel, the following vulnerability has been resolved: ARM: OMAP2+: omap4-common: Fix refcount leak bug In omap4_sram_init(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when i... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 
 - 
                                
                                
0.0
NACVE-2022-50530
In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() Our syzkaller report a null pointer dereference, root cause is following: __blk_mq_alloc_map_and_rqs set->tags[hctx_i... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2022-50528
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix memory leakage This patch fixes potential memory leakage and seg fault in _gpuvm_import_dmabuf() function... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 
 - 
                                
                                
0.0
NACVE-2022-50524
In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Check return value after calling platform_get_resource() platform_get_resource() may return NULL pointer, we need check its return value to avoid null-ptr-deref in resou... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2022-50523
In the Linux kernel, the following vulnerability has been resolved: clk: rockchip: Fix memory leak in rockchip_clk_register_pll() If clk_register() fails, @pll->rate_table may have allocated memory by kmemdup(), so it needs to be freed, otherwise will c... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption
 
 - 
                                
                                
0.0
NACVE-2022-50522
In the Linux kernel, the following vulnerability has been resolved: mcb: mcb-parse: fix error handing in chameleon_parse_gdd() If mcb_device_register() returns error in chameleon_parse_gdd(), the refcount of bus and device name are leaked. Fix this by c... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 
 - 
                                
                                
0.0
NACVE-2022-50519
In the Linux kernel, the following vulnerability has been resolved: nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure If creation or finalization of a checkpoint fails due to anomalies in the checkpoint metadata on disk, a kerne... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Misconfiguration
 
 - 
                                
                                
0.0
NACVE-2022-50515
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() If construction of the array of work queues to handle hpd_rx_irq offload work fails, we need to unwind. Destroy all the crea... Read more
Affected Products : linux_kernel- Published: Oct. 07, 2025
 - Modified: Oct. 08, 2025
 - Vuln Type: Memory Corruption