CVEs from 2025

8,987 normalized CVEs published or assigned in this year.

Total
8,987
critical
critical 1,368
high
high 2,067
medium
medium 2,068
low
low 204
% Critical
15.2%
% with KEV
2.0%
% with exploit
2.8%

Top products

  • i-educar 80
  • office_long_term_servicing_channel 35
  • office 34
  • best_salon_management_system 33
  • apartment_management_system 30
  • gcp 29
  • inventory_management_system 28
  • online_learning_management_system 21
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2025-39772 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver use hibmc_unload to free the resource, …
CVE-2025-39770 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing Generic Segmentation Offload (GSO) on an…
CVE-2025-39756 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is set to a very high value (for example, 107…
CVE-2025-39752 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bring up secondary CPUs main CPU write trampoline code to SR…
CVE-2025-39742 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() The function divides number of online CPUs by num_core_siblings,…
CVE-2025-39737 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was observed on a relative small system x86-64 sy…
CVE-2025-39736 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_warn_once() while holdi…
CVE-2025-22097 medium 5.5 9mo ago Moderate: kernel security update
CVE-2025-58364 medium 5.5 9mo ago RHSA-2025:22063: cups security update (Moderate)
CVE-2025-53799 medium 5.5 5.5 9mo ago Use of uninitialized resource in Windows Imaging Component allows an unauthorized attacker to disclose information locally.
CVE-2025-39724 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PSLVERR_RESP_EN parameter is set to 1, the device generates an error response if …
CVE-2025-39716 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read access Because of the way read access support is implemented, read access interrup…
CVE-2025-39715 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read access We use load and stbys,e instructions to trigger memory reference inter…
CVE-2025-39714 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Lock resolution while streaming When an program is streaming (ffplay) and another program (qv4l2) changes the TV st…
CVE-2025-39709 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts during probe Make sure the interrupt handler is initialized before the interrup…
CVE-2025-39706 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD wq Since KFD proc content was moved to kernel debugfs, we can't destroy KFD deb…
CVE-2025-39703 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: net, hsr: reject HSR frame if skb can't hold tag Receiving HSR frame with insufficient space to hold HSR tag in the skb can resul…
CVE-2025-39693 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference [WHY] Although unlikely drm_atomic_get_new_connector_state() or drm_atomic_get_…
CVE-2025-39692 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() We can't call destroy_workqueue(smb_direct_wq); before…
CVE-2025-39684 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() syzbot reports a KMSAN kernel-infoleak in `do_…
CVE-2025-39681 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper Since 923f3a2b48bd ("x86/resctrl: Query LLC monitoring prop…
CVE-2025-39676 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on err…
CVE-2025-39675 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() The function mod_hdcp_hdcp1_create_session() calls the…
CVE-2025-38735 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: gve: prevent ethtool ops after shutdown A crash can occur if an ethtool operation is invoked after shutdown() is called. shutdow…
CVE-2025-38732 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_reject: don't leak dst refcount for loopback packets recent patches to add a WARN() when replacing skb dst entry fo…
CVE-2025-38727 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: netlink: avoid infinite retry looping in netlink_unicast() netlink_attachskb() checks for the socket's read memory allocation con…
CVE-2025-38725 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: net: usb: asix_devices: add phy_mask for ax88772 mdio bus Without setting phy_mask for ax88772 mdio bus, current driver may creat…
CVE-2025-38723 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix jump offset calculation in tailcall The extra pass of bpf_int_jit_compile() skips JIT context initialization …
CVE-2025-38721 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix refcount leak on table dump There is a reference count leak in ctnetlink_dump_table(): if (res < …
CVE-2025-38712 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume header contains erroneous values that do not refl…
CVE-2025-38711 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: smb/server: avoid deadlock when linking with ReplaceIfExists If smb2_create_link() is called with ReplaceIfExists set and the nam…
CVE-2025-38710 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: gfs2: Validate i_depth for exhash directories A fuzzer test introduced corruption that ends up with a depth of 0 in dir_e_read(),…
CVE-2025-38706 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() snd_soc_remove_pcm_runtime() might be called with rtd == NULL w…
CVE-2025-38701 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed image triggered a BUG_ON in ext4_update_inline_data(…
CVE-2025-38700 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated In case of an ib_fast_reg_mr allocation failure during…
CVE-2025-38698 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i_size value. Add a check when …
CVE-2025-38696 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: MIPS: Don't crash in stack_top() for tasks without ABI or vDSO Not all tasks have an ABI associated or vDSO mapped, for example k…
CVE-2025-38695 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure If a call to lpfc_sli4_read_rev() from lpfc_sli4_hba_se…
CVE-2025-38694 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() In dib7090p_rw_on_apb, msg is controlled by user. When…
CVE-2025-38693 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar In w7090p_tuner_write_…
CVE-2025-38691 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents. When function ext_tree…
CVE-2025-38683 medium 5.5 5.5 9mo ago In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NETDEV_REGISTER is…
CVE-2025-38684 medium 5.5 5.5 9mo ago Important: kernel security update
CVE-2025-8194 medium 5.5 9mo ago There is a defect in the CPython “tarfile” module affecting the “TarFile” extraction and entry enumeration APIs. The tar implementation would process tar archives with negative offsets without error,…
CVE-2025-49630 medium 5.5 9mo ago In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untrusted clients causing an assertion in mod_proxy_http2.…
CVE-2025-23048 medium 5.5 9mo ago In some mod_ssl configurations on Apache HTTP Server 2.4.35 through to 2.4.63, an access control bypass by trusted clients is possible using TLS 1.3 session resumption. Configurations are affected w…
CVE-2025-49812 medium 5.5 9mo ago In some mod_ssl configurations on Apache HTTP Server versions through to 2.4.63, an HTTP desynchronisation attack allows a man-in-the-middle attacker to hijack an HTTP session via a TLS upgrade. Onl…
CVE-2025-9695 medium 5.5 5.5 9mo ago A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thin…
CVE-2025-9677 medium 5.5 5.5 9mo ago A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown function of the file AndroidManifest.xml of the component com.duige.hzw.multilingual.…
CVE-2025-9676 medium 5.5 5.5 9mo ago A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft.universeapp. The manipulation leads to i…
CVE-2025-9675 medium 5.5 5.5 9mo ago A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing mani…
CVE-2025-9674 medium 5.5 5.5 9mo ago A flaw has been found in Transbyte Scooper News App up to 1.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.hatsune.eagleee. Th…
CVE-2025-9649 medium 5.5 5.5 9mo ago A security vulnerability has been detected in appneta tcpreplay 4.5.1. Impacted is the function calc_sleep_time of the file send_packets.c. Such manipulation leads to divide by zero. An attack has to…
CVE-2025-54467 medium 5.5 9mo ago NeuVector process with sensitive arguments lead to leakage
CVE-2025-53884 medium 5.5 9mo ago NeuVector has an insecure password storage vulnerable to rainbow attack
CVE-2025-9403 medium 5.5 5.5 10mo ago A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Executing manipulation can lead to reachable assertion…
CVE-2025-9396 medium 5.5 5.5 10mo ago A security flaw has been discovered in ckolivas lrzip up to 0.651. This impacts the function __GI_____strtol_l_internal of the file strtol_l.c. Performing manipulation results in null pointer derefer…
CVE-2025-9394 medium 5.5 5.5 10mo ago A flaw has been found in PoDoFo 1.1.0-dev. This issue affects the function PdfTokenizer::DetermineDataType of the file src/podofo/main/PdfTokenizer.cpp of the component PDF Dictionary Parser. Executi…
CVE-2025-9390 medium 5.5 5.5 10mo ago A security flaw has been discovered in vim up to 9.1.1615. Affected by this vulnerability is the function main of the file src/xxd/xxd.c of the component xxd. The manipulation results in buffer overf…
CVE-2025-9389 medium 5.5 5.5 10mo ago A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The manipulation leads to memory corruption. The attack…
CVE-2025-9386 medium 5.5 5.5 10mo ago A vulnerability has been found in appneta tcpreplay up to 4.5.1. The impacted element is the function get_l2len_protocol of the file get.c of the component tcprewrite. Such manipulation leads to use …
CVE-2025-9385 medium 5.5 5.5 10mo ago A flaw has been found in appneta tcpreplay up to 4.5.1. The affected element is the function fix_ipv6_checksums of the file edit_packet.c of the component tcprewrite. This manipulation causes use aft…
CVE-2025-9384 medium 5.5 5.5 10mo ago A vulnerability was detected in appneta tcpreplay up to 4.5.1. Impacted is the function tcpedit_post_args of the file /src/tcpedit/parse_args.c. The manipulation results in null pointer dereference. …
CVE-2025-38659 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: gfs2: No more self recovery When a node withdraws and it turns out that it is the only node that has the filesystem mounted, gfs2…
CVE-2025-38626 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode w/ "mode=lfs" mount option, generic/299 will cause system…
CVE-2025-9135 medium 5.5 5.5 10mo ago A vulnerability was detected in Verkehrsauskunft Österreich SmartRide, cleVVVer, BusBahnBim and Salzburg Verkehr up to 12.1.1(258) on Android. The impacted element is an unknown function of the file …
CVE-2025-9134 medium 5.5 5.5 10mo ago A security vulnerability has been detected in AfterShip Package Tracker App up to 5.24.1 on Android. The affected element is an unknown function of the file AndroidManifest.xml of the component com.a…
CVE-2025-9102 medium 5.5 5.5 10mo ago A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.mail.mobile.android.…
CVE-2025-38124 medium 5.5 5.5 10mo ago Important: kernel security update
CVE-2025-47906 medium 5.5 10mo ago RHSA-2025:22668: go-toolset:rhel8 security update (Moderate)
CVE-2025-9093 medium 5.5 5.5 10mo ago A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation lead…
CVE-2025-8916 medium 5.5 10mo ago Bouncy Castle for Java bcpkix, bcprov, bcpkix-fips on All (API modules) allows Excessive Allocation
CVE-2025-8844 medium 5.5 5.5 10mo ago A vulnerability was determined in NASM Netwide Assember 2.17rc0. This vulnerability affects the function parse_smacro_template of the file preproc.c. The manipulation leads to null pointer dereferenc…
CVE-2025-8835 medium 5.5 5.5 10mo ago A vulnerability was found in JasPer up to 4.2.5. Affected by this vulnerability is the function jas_image_chclrspc of the file src/libjasper/base/jas_image.c of the component Image Color Space Conver…
CVE-2025-38292 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-8746 medium 5.5 5.5 10mo ago A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function __strstr_sse2. The manipulation leads to memory corruption. Local access is require…
CVE-2025-8745 medium 5.5 5.5 10mo ago A vulnerability, which was classified as problematic, has been found in Weee RICEPO App 6.17.77 on Android. This issue affects some unknown processing of the file AndroidManifest.xml of the component…
CVE-2025-8707 medium 5.5 5.5 10mo ago A vulnerability was found in Huuge Box App 1.0.3 on Android. It has been classified as problematic. This affects an unknown part of the file AndroidManifest.xml of the component com.huuge.game.zjbox.…
CVE-2025-32415 medium 5.5 10mo ago In libxml2 before 2.13.8 and 2.14.x before 2.14.2, xmlSchemaIDCFillNodeTables in xmlschemas.c has a heap-based buffer under-read. To exploit this, a crafted XML document must be validated against an …
CVE-2025-32414 medium 5.5 10mo ago In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and…
CVE-2025-3159 medium 5.5 10mo ago Moderate: qt5-qt3d security update
CVE-2025-3158 medium 5.5 10mo ago A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of …
CVE-2025-7345 medium 5.5 10mo ago RHSA-2025:13315: gdk-pixbuf2 security update (Moderate)
CVE-2025-48866 medium 5.5 10mo ago Moderate: mod_security security update
CVE-2025-8058 medium 5.5 10mo ago RHSA-2025:12980: glibc security update (Moderate)
CVE-2025-49133 medium 5.5 10mo ago RHSA-2025:12527: virt:rhel and virt-devel:rhel security update (Moderate)
CVE-2025-5222 medium 5.5 10mo ago Moderate: icu security update
CVE-2025-38491 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at …
CVE-2025-38468 medium 5.5 5.5 10mo ago In the Linux kernel, the following vulnerability has been resolved: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree htb_lookup_leaf has a BUG_ON that can trigger with the fol…
CVE-2025-37797 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-37958 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22121 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22113 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22091 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-38086 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-21905 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-40909 medium 5.5 10mo ago RHSA-2026:8096: perl:5.32 security update (Moderate)
CVE-2025-38110 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-22085 medium 5.5 10mo ago Moderate: kernel security update
CVE-2025-8224 medium 5.5 5.5 10mo ago A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file bfd/elf.c of the component BFD Library. …