CVEs from 2025

8,935 normalized CVEs published or assigned in this year.

Total
8,935
critical
critical 1,363
high
high 2,047
medium
medium 2,041
low
low 204
% Critical
15.3%
% with KEV
2.0%
% with exploit
2.8%

Top products

  • i-educar 80
  • office_long_term_servicing_channel 35
  • office 34
  • best_salon_management_system 33
  • apartment_management_system 30
  • gcp 29
  • inventory_management_system 28
  • online_learning_management_system 21
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2025-58364 medium 5.5 9mo ago RHSA-2025:22063: cups security update (Moderate)
CVE-2025-22097 medium 5.5 9mo ago Moderate: kernel security update
CVE-2025-53799 medium 5.5 5.5 9mo ago Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVE-2025-39724 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN parameter is set to 1, the device generates an error response if …
CVE-2025-39716 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access support is implemented, read access interrup…
CVE-2025-39715 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference inter…
CVE-2025-39714 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV st…
CVE-2025-39709 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt handler is initialized before the interrup…
CVE-2025-39706 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel debugfs, we can't destroy KFD deb…
CVE-2025-39703 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can resul…
CVE-2025-39693 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_new_connector_state() or drm_atomic_get_…
CVE-2025-39692 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call destroy_workqueue(smb_direct_wq); before…
CVE-2025-39684 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot reports a KMSAN kernel-infoleak in `do_…
CVE-2025-39681 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd ("x86/resctrl: Query LLC monitoring prop…
CVE-2025-39676 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on err…
CVE-2025-39675 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function mod_hdcp_hdcp1_create_session() calls the…
CVE-2025-38735 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown() is called. shutdow…
CVE-2025-38732 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add a WARN() when replacing skb dst entry fo…
CVE-2025-38727 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() checks for the socket's read memory allocation con…
CVE-2025-38725 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_mask for ax88772 mdio bus, current driver may creat…
CVE-2025-38723 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpf_int_jit_compile() skips JIT context initialization …
CVE-2025-38721 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlink_dump_table(): if (res < …
CVE-2025-38712 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains erroneous values that do not refl…
CVE-2025-38711 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExists set and the nam…
CVE-2025-38710 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in dir_e_read(),…
CVE-2025-38706 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runtime() might be called with rtd == NULL w…
CVE-2025-38701 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image triggered a BUG_ON in ext4_update_inline_data(…
CVE-2025-38700 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr allocation failure during…
CVE-2025-38698 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i_size value. Add a check when …
CVE-2025-38696 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example k…
CVE-2025-38695 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_se…
CVE-2025-38694 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw_on_apb, msg is controlled by user. When…
CVE-2025-38693 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_…
CVE-2025-38691 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree…
CVE-2025-38683 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NETDEV_REGISTER is…
CVE-2025-49812 medium 5.5 9mo ago In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Onl…
CVE-2025-49630 medium 5.5 9mo ago In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2.…
CVE-2025-23048 medium 5.5 9mo ago In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clients is possible using TLS 1.3 session resumption. Configurations are affected w…
CVE-2025-38684 medium 5.5 5.5 9mo ago Important: kernel security update
CVE-2025-8194 medium 5.5 9mo ago There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error,…
CVE-2025-9695 medium 5.5 5.5 9mo ago A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thin…
CVE-2025-9677 medium 5.5 5.5 9mo ago A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown function of the file AndroidManifest.xml of the component com.duige.hzw.multilingual.…
CVE-2025-9676 medium 5.5 5.5 9mo ago A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft.universeapp. The manipulation leads to i…
CVE-2025-9675 medium 5.5 5.5 9mo ago A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing mani…
CVE-2025-9674 medium 5.5 5.5 9mo ago A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.hatsune.eagleee. Th…
CVE-2025-9649 medium 5.5 5.5 9mo ago A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calc_sleep_time of the file send_packets.c. Such manipulation leads to divide by zero. An attack has to…
CVE-2025-54467 medium 5.5 9mo ago NeuVector process with sensitive arguments lead to leakage
CVE-2025-53884 medium 5.5 9mo ago NeuVector has an insecure password storage vulnerable to rainbow attack
CVE-2025-9403 medium 5.5 5.5 10mo ago A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion…
CVE-2025-9396 medium 5.5 5.5 10mo ago A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing manipulation results in null pointer derefer…
CVE-2025-9394 medium 5.5 5.5 10mo ago A flaw has been found in PoDoFo 1.1.0-dev. This issue affects the function PdfTokenizer::DetermineDataType of the file src/podofo/main/PdfTokenizer.cpp of the component PDF Dictionary Parser. Executi…
CVE-2025-9390 medium 5.5 5.5 10mo ago A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overf…
CVE-2025-9389 medium 5.5 5.5 10mo ago A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack…
CVE-2025-9386 medium 5.5 5.5 10mo ago A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use …
CVE-2025-9385 medium 5.5 5.5 10mo ago A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use aft…
CVE-2025-9384 medium 5.5 5.5 10mo ago A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. …
CVE-2025-38659 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only node that has the filesystem mounted, gfs2…
CVE-2025-38626 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system…
CVE-2025-9135 medium 5.5 5.5 10mo ago A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted element is an unknown function of the file …
CVE-2025-9134 medium 5.5 5.5 10mo ago A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android. The affected element is an unknown function of the file AndroidManifest.xml of the component com.a…
CVE-2025-9102 medium 5.5 5.5 10mo ago A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.mail.mobile.android.…
CVE-2025-47906 medium 5.5 10mo ago RHSA-2025:22668: go-toolset:rhel8 security update (Moderate)
CVE-2025-38124 medium 5.5 5.5 10mo ago Important: kernel security update
CVE-2025-9093 medium 5.5 5.5 10mo ago A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation lead…
CVE-2025-8916 medium 5.5 10mo ago Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
CVE-2025-8844 medium 5.5 5.5 10mo ago A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parse_smacro_template of the file preproc.c. The manipulation leads to null pointer dereferenc…
CVE-2025-8835 medium 5.5 5.5 10mo ago A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conver…
CVE-2025-38292 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-8746 medium 5.5 5.5 10mo ago A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation leads to memory corruption. Local access is require…
CVE-2025-8745 medium 5.5 5.5 10mo ago A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component…
CVE-2025-8707 medium 5.5 5.5 10mo ago A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unknown part of the file AndroidManifest.xml of the component com.huuge.game.zjbox.…
CVE-2025-32415 medium 5.5 10mo ago In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an …
CVE-2025-32414 medium 5.5 10mo ago In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and…
CVE-2025-7345 medium 5.5 10mo ago RHSA-2025:13315: gdk-pixbuf2 security update (Moderate)
CVE-2025-3158 medium 5.5 10mo ago A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of …
CVE-2025-3159 medium 5.5 10mo ago Moderate: qt5-qt3d security update
CVE-2025-48866 medium 5.5 10mo ago Moderate: mod_security security update
CVE-2025-8058 medium 5.5 10mo ago RHSA-2025:12980: glibc security update (Moderate)
CVE-2025-49133 medium 5.5 10mo ago RHSA-2025:12527: virt:rhel and virt-devel:rhel security update (Moderate)
CVE-2025-5222 medium 5.5 10mo ago Moderate: icu security update
CVE-2025-38491 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at …
CVE-2025-38468 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree htb_lookup_leaf has a BUG_ON that can trigger with the fol…
CVE-2025-37958 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-38086 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-38110 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22121 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22113 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22091 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-37797 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-21905 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-40909 medium 5.5 10mo ago RHSA-2026:8096: perl:5.32 security update (Moderate)
CVE-2025-22085 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-8224 medium 5.5 5.5 10mo ago A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file bfd/elf.c of the component BFD Library. …
CVE-2025-38466 medium 5.5 5.5 11mo ago In the Linux kernel, the following vulnerability has been resolved: perf: Revert to requiring CAP_SYS_ADMIN for uprobes Jann reports that uprobes can be used destructively when used in the middle o…
CVE-2025-38465 medium 5.5 5.5 11mo ago In the Linux kernel, the following vulnerability has been resolved: netlink: Fix wraparounds of sk->sk_rmem_alloc. Netlink has this pattern in some places if (atomic_read(&sk->sk_rmem_alloc) > s…
CVE-2025-38457 medium 5.5 5.5 11mo ago In the Linux kernel, the following vulnerability has been resolved: net/sched: Abort __tc_modify_qdisc if parent class does not exist Lion's patch [1] revealed an ancient bug in the qdisc API. When…
CVE-2025-38451 medium 5.5 5.5 11mo ago In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The commit message of commit 6ec1f0239485 ("md/md-bitmap: fix stats collection for ex…
CVE-2025-38430 medium 5.5 5.5 11mo ago In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request…
CVE-2025-38364 medium 5.5 5.5 11mo ago In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() Temporarily clear the preallocation flag when explicitly requesting a…
CVE-2025-7893 medium 5.5 5.5 11mo ago A vulnerability classified as problematic was found in Foresight News App up to 2.6.4 on Android. This vulnerability affects unknown code of the file AndroidManifest.xml of the component pro.foresigh…