Latest CVE Feed
-
0.0
NACVE-2025-38148
In the Linux kernel, the following vulnerability has been resolved: net: phy: mscc: Fix memory leak when using one step timestamping Fix memory leak when running one-step timestamping. When running one-step sync timestamping, the HW is configured to ins... Read more
Affected Products : linux_kernel- Published: Jul. 03, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2025-38095
In the Linux kernel, the following vulnerability has been resolved: dma-buf: insert memory barrier before updating num_fences smp_store_mb() inserts memory barrier after storing operation. It is different with what the comment is originally aiming so Nu... Read more
Affected Products : linux_kernel- Published: Jul. 03, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2025-37968
In the Linux kernel, the following vulnerability has been resolved: iio: light: opt3001: fix deadlock due to concurrent flag access The threaded IRQ function in this driver is reading the flag twice: once to lock a mutex and once to unlock it. Even thou... Read more
Affected Products : linux_kernel- Published: May. 20, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Race Condition
-
0.0
NACVE-2025-37931
In the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize When running machines with 64k page size and a 16k nodesize we started seeing tree log corruption in production. This turned out to ... Read more
Affected Products : linux_kernel- Published: May. 20, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Misconfiguration
-
0.0
NACVE-2025-37842
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called... Read more
Affected Products : linux_kernel- Published: May. 09, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Misconfiguration
-
0.0
NACVE-2025-23133
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the following steps: 1. update new ... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2025-22125
In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Misconfiguration
-
0.0
NACVE-2025-22124
In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb In clustermd, separate write-intent-bitmaps are used for each cluster node: 0 4k ... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Misconfiguration
-
0.0
NACVE-2025-22113
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid journaling sb update on error if journal is destroying Presently we always BUG_ON if trying to start a transaction on a journal marked with JBD2_UNMOUNT, since this should n... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Race Condition
-
0.0
NACVE-2025-22103
In the Linux kernel, the following vulnerability has been resolved: net: fix NULL pointer dereference in l3mdev_l3_rcv When delete l3s ipvlan: ip link del link eth0 ipvlan1 type ipvlan mode l3s This may cause a null pointer dereference: Call ... Read more
Affected Products : linux_kernel- Published: Apr. 16, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Memory Corruption
-
0.0
NACVE-2024-57924
In the Linux kernel, the following vulnerability has been resolved: fs: relax assertions on failure to encode file handles Encoding file handles is usually performed by a filesystem >encode_fh() method that may fail for various reasons. The legacy user... Read more
Affected Products : linux_kernel- Published: Jan. 19, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Misconfiguration
-
5.5
MEDIUMCVE-2024-47704
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check link_res->hpo_dp_link_enc before using it [WHAT & HOW] Functions dp_enable_link_phy and dp_disable_link_phy can pass link_res without initializing hpo_dp_link_enc... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Sep. 09, 2025
-
7.8
HIGHCVE-2023-52935
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix ->anon_vma race If an ->anon_vma is attached to the VMA, collapse_and_free_pmd() requires it to be locked. Page table traversal is allowed under any one of the mmap ... Read more
Affected Products : linux_kernel- Published: Mar. 27, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Race Condition
-
6.1
MEDIUMCVE-2025-10067
A vulnerability was detected in itsourcecode POS Point of Sale System 1.0. The impacted element is an unknown function of the file /inventory/main/vendors/datatables/unit_testing/templates/empty_table.php. Performing manipulation of the argument scripts r... Read more
Affected Products : point_of_sale_system- Published: Sep. 07, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Cross-Site Scripting
-
9.8
CRITICALCVE-2025-10068
A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/admin_forum/add_views.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remo... Read more
- Published: Sep. 07, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Injection
-
9.8
CRITICALCVE-2025-10078
A vulnerability was detected in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/candidates.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible... Read more
Affected Products : online_polling_system- Published: Sep. 08, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Injection
-
7.2
HIGHCVE-2025-10081
A flaw has been found in SourceCodester Pet Management System 1.0. This impacts an unknown function of the file /admin/profile.php. This manipulation of the argument website_image causes unrestricted upload. Remote exploitation of the attack is possible. ... Read more
Affected Products : pet_grooming_management_software- Published: Sep. 08, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Misconfiguration
-
9.8
CRITICALCVE-2025-10082
A vulnerability has been found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. The attack can be executed remotely. The expl... Read more
Affected Products : online_polling_system- Published: Sep. 08, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Injection
-
6.3
MEDIUMCVE-2025-59015
A deterministic three‑character prefix in the Password Generation component of TYPO3 CMS versions 12.0.0–12.4.36 and 13.0.0–13.4.17 reduces entropy, allowing attackers to carry out brute‑force attacks more quickly.... Read more
Affected Products :- Published: Sep. 09, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Authentication
-
3.1
LOWCVE-2025-40803
A vulnerability has been identified in RUGGEDCOM RST2428P (6GK6242-6PA00) (All versions). The affected device exposes certain non-critical information from the device. This could allow an unauthenticated attacker to access sensitive data, potentially lead... Read more
Affected Products :- Published: Sep. 09, 2025
- Modified: Sep. 09, 2025
- Vuln Type: Information Disclosure