Latest CVE Feed
-
5.5
MEDIUMCVE-2024-26959
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix btnxpuart_close Fix scheduling while atomic BUG in btnxpuart_close(), properly purge the transmit queue and free the receive skb. [ 10.973809] BUG: scheduli... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2024-26963
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-am62: fix module unload/reload behavior As runtime PM is enabled, the module can be runtime suspended when .remove() is called. Do a pm_runtime_get_sync() to make sure module... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
6.5
MEDIUMCVE-2025-48493
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and... Read more
Affected Products : yii2-redis- Published: Jun. 05, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Cryptography
-
5.5
MEDIUMCVE-2024-36025
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() The app_reply->elem[] array is allocated earlier in this function and it has app_req.num_ports elements. Thus this > comparison... Read more
Affected Products : linux_kernel- Published: May. 30, 2024
- Modified: Sep. 18, 2025
-
5.5
MEDIUMCVE-2022-48643
In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() syzbot is reporting underflow of nft_counters_enabled counter at nf_tables_addchain() [1], for commit 43... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 18, 2025
-
7.5
HIGHCVE-2025-23252
The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure.... Read more
Affected Products : nvdebug- Published: Jun. 18, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2023-52647
In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access When translating source to sink streams in the crossbar subdev, the driver tries to locate the remote subdev c... Read more
Affected Products : linux_kernel- Published: May. 01, 2024
- Modified: Sep. 18, 2025
-
6.1
MEDIUMCVE-2025-50181
urllib3 is a user-friendly HTTP client library for Python. Prior to 2.5.0, it is possible to disable redirects for all requests by instantiating a PoolManager and specifying retries in a way that disable redirects. By default, requests and botocore users ... Read more
- Published: Jun. 19, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Server-Side Request Forgery
-
8.8
HIGHCVE-2025-10533
This vulnerability affects Firefox < 143, Firefox ESR < 115.28, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
5.4
MEDIUM- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
6.5
MEDIUMCVE-2025-10532
This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
8.1
HIGH- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
7.5
HIGH- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
8.4
HIGHCVE-2025-10536
This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
6.5
MEDIUMCVE-2025-10290
Opening links via the contextual menu in Focus iOS for certain URL schemes would fail to load but would not refresh the toolbar correctly, allowing attackers to spoof websites if users were coerced into opening a link explicitly through a long-press This ... Read more
Affected Products : firefox_focus- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Misconfiguration
-
7.1
HIGHCVE-2025-10527
This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
6.5
MEDIUMCVE-2025-10529
This vulnerability affects Firefox < 143, Firefox ESR < 140.3, Thunderbird < 143, and Thunderbird < 140.3.... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
6.5
MEDIUM- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
-
8.8
HIGHCVE-2025-10537
Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrar... Read more
- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Memory Corruption
-
5.1
MEDIUMCVE-2025-10546
This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface (CGI) parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vu... Read more
Affected Products :- Published: Sep. 16, 2025
- Modified: Sep. 18, 2025
- Vuln Type: Cross-Site Scripting