Latest CVE Feed
-
9.8
CRITICALCVE-2022-27304
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter.... Read more
- Published: Apr. 05, 2022
- Modified: Sep. 19, 2025
-
3.3
LOWCVE-2022-48668
In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in collapse range collapse range doesn't discard the affected cached region so can risk temporarily corrupting the file data. This fixes xfstest gene... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
3.3
LOWCVE-2022-48667
In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affected cached region so can risk temporarily corrupting file data. Also includes some minor clean... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48665
In the Linux kernel, the following vulnerability has been resolved: exfat: fix overflow for large capacity partition Using int type for sector index, there will be overflow in a large capacity partition. For example, if storage with sector size of 512 ... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
8.8
HIGHCVE-2025-10409
A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql injection. The attack can be launched remotely. The exp... Read more
- Published: Sep. 14, 2025
- Modified: Sep. 19, 2025
- Vuln Type: Injection
-
5.5
MEDIUMCVE-2022-48653
In the Linux kernel, the following vulnerability has been resolved: ice: Don't double unplug aux on peer initiated reset In the IDC callback that is accessed when the aux drivers request a reset, the function to unplug the aux devices is called. This f... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48652
In the Linux kernel, the following vulnerability has been resolved: ice: Fix crash by keep old cfg when update TCs more than queues There are problems if allocated queues less than Traffic Classes. Commit a632b2a4c920 ("ice: ethtool: Prohibit improper ... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48645
In the Linux kernel, the following vulnerability has been resolved: net: enetc: deny offload of tc-based TSN features on VF interfaces TSN features on the ENETC (taprio, cbs, gate, police) are configured through a mix of command BD ring messages and por... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.7
MEDIUMCVE-2025-2598
When the AWS Cloud Development Kit (AWS CDK) Command Line Interface (AWS CDK CLI) is used with a credential plugin which returns an expiration property with the retrieved AWS credentials, the credentials are printed to the console output. To mitigate this... Read more
Affected Products : aws_cloud_development_kit- Published: Mar. 21, 2025
- Modified: Sep. 19, 2025
- Vuln Type: Information Disclosure
-
5.5
MEDIUMCVE-2022-48644
In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: avoid disabling offload when it was never enabled In an incredibly strange API design decision, qdisc->destroy() gets called even if qdisc->init() never succeeded, no... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48640
In the Linux kernel, the following vulnerability has been resolved: bonding: fix NULL deref in bond_rr_gen_slave_id Fix a NULL dereference of the struct bonding.rr_tx_counter member because if a bond is initially created with an initial mode != zero (Ro... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48633
In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix WARN_ON(lock->magic != lock) error psb_gem_unpin() calls dma_resv_lock() but the underlying ww_mutex gets destroyed by drm_gem_object_release() move the drm_gem_object_r... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48631
In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 When walking through an inode extents, the ext4_ext_binsearch_idx() function assumes that the extent header has be... Read more
Affected Products : linux_kernel- Published: Apr. 28, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48690
In the Linux kernel, the following vulnerability has been resolved: ice: Fix DMA mappings leak Fix leak, when user changes ring parameters. During reallocation of RX buffers, new DMA mappings are created for those buffers. New buffers with different RX ... Read more
Affected Products : linux_kernel- Published: May. 03, 2024
- Modified: Sep. 19, 2025
-
9.9
CRITICALCVE-2024-2044
pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. If the server is running on Windows, an unauthenticated attacker can load and deserialize remote pickle objects and gain code ex... Read more
- Published: Mar. 07, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2024-35797
In the Linux kernel, the following vulnerability has been resolved: mm: cachestat: fix two shmem bugs When cachestat on shmem races with swapping and invalidation, there are two possible bugs: 1) A swapin error can have resulted in a poisoned swap entr... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48699
In the Linux kernel, the following vulnerability has been resolved: sched/debug: fix dentry leak in update_sched_domain_debugfs Kuyo reports that the pattern of using debugfs_remove(debugfs_lookup()) leaks a dentry and with a hotplug stress test, the ma... Read more
Affected Products : linux_kernel- Published: May. 03, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2023-52673
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix a debugfs null pointer error [WHY & HOW] Check whether get_subvp_en() callback exists before calling it.... Read more
Affected Products : linux_kernel- Published: May. 17, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48704
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeon card fence and wait for gpu to finish processing current batch rings, there is still a corner case that radeon lo... Read more
Affected Products : linux_kernel- Published: May. 03, 2024
- Modified: Sep. 19, 2025
-
5.5
MEDIUMCVE-2022-48705
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix crash in chip reset fail In case of drv own fail in reset, we may need to run mac_reset several times. The sequence would trigger system crash as the log below.... Read more
Affected Products : linux_kernel- Published: May. 03, 2024
- Modified: Sep. 19, 2025