Browse CVEs

MEDIUM 5.5 CVE-2025-39801 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARN_ON for device endpoint command timeouts This commit addr… Linux Kernel 5.15.190 / 6.1.149+ Fix from $1,6002025-09-15 HIGH 7.8 CVE-2025-39803 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Remove WARN_ON_ONCE() call from ufshcd_uic_cmd_compl() The UIC… Linux Kernel 6.16.4+ Fix from $1,9502025-09-15 MEDIUM 5.5 CVE-2025-39768 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix complex rules rehash error flow Moving rules from matcher to… Linux Kernel 6.16.4+ Fix from $1,6002025-09-11 MEDIUM 5.5 CVE-2025-38712 In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() When the volume… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,6002025-09-04 MEDIUM 5.5 CVE-2025-38701 In the Linux kernel, the following vulnerability has been resolved: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr A syzbot fuzzed im… Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,6002025-09-04 MEDIUM 5.5 CVE-2025-38690 In the Linux kernel, the following vulnerability has been resolved: drm/xe/migrate: prevent infinite recursion If the buf + offset is not aligned t… Linux Kernel 6.16.2+ Fix from $1,6002025-09-04 MEDIUM 5.3 CVE-2025-9405 A security flaw has been discovered in Open5GS up to 2.7.5. The impacted element is the function gmm_state_exception of the file src/amf/gmm-sm.c. Th… Open5gs 2.7.6+ Fix from $1,6002025-08-25 MEDIUM 5.5 CVE-2025-9403 A vulnerability was determined in jqlang jq up to 1.6. Impacted is the function run_jq_tests of the file jq_test.c of the component JSON Parser. Exec… Jq after 1.6 Fix from $1,6002025-08-25 MEDIUM 5.5 CVE-2025-38642 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix WARN_ON for monitor mode on some devices On devices without… Linux Kernel 6.15.10 / 6.16.1+ Fix from $1,6002025-08-22 MEDIUM 5.5 CVE-2025-38544 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix bug due to prealloc collision When userspace is using AF_RXRPC to pr… Linux Kernel 6.6.99 / 6.12.39+ Fix from $1,6002025-08-16 MEDIUM 5.5 CVE-2025-38503 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix assertion when building free space tree When building the free space… Linux Kernel 6.1.146 / 6.6.99+ Fix from $1,6002025-08-16 MEDIUM 5.5 CVE-2025-30034 A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V3.3). Affected devices do not properly validate input sent to i… Simatic Rtls Locating Manager 3.3+ Fix from $1,6002025-08-12 HIGH 7.5 CVE-2025-8804 A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component A… Open5gs 2.7.6+ Fix from $1,9502025-08-10 HIGH 7.5 CVE-2025-27073 Transient DOS while creating NDP instance. Immersive Home 214 Platform Firmware No fix yet Fix from $1,9502025-08-06 HIGH 7.5 CVE-2025-27066 Transient DOS while processing an ANQP message. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502025-08-06 HIGH 7.5 CVE-2025-21452 Transient DOS while processing a random-access response (RAR) with an invalid PDU length on LTE network. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502025-08-06 MEDIUM 5.9 CVE-2025-8537 A vulnerability, which was classified as problematic, was found in Axiomatic Bento4 up to 1.6.0-641. Affected is the function AP4_DataBuffer::SetData… Bento4 after 1.6.0-641 Fix from $1,6002025-08-05 MEDIUM 5.3 CVE-2025-54350 In iperf before 3.19.1, iperf_auth.c has a Base64Decode assertion failure and application exit upon a malformed authentication attempt. Iperf3 3.19.1+ Fix from $1,6002025-08-03 HIGH 7.5 CVE-2024-42644 FlashMQ v1.14.0 was discovered to contain an assertion failure in the function PublishCopyFactory::getNewPublish, which occurs when the QoS value of … Flashmq No fix yet Fix from $1,9502025-07-29 HIGH 7.5 CVE-2024-42645 An issue in FlashMQ v1.14.0 allows attackers to cause an assertion failure via sending a crafted retain message, leading to a Denial of Service (DoS). Flashmq No fix yet Fix from $1,9502025-07-29 HIGH 7.5 CVE-2025-46354 A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially cra… Comdb2 No fix yet Fix from $1,9502025-07-22 HIGH 7.5 CVE-2025-36512 A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted … Comdb2 No fix yet Fix from $1,9502025-07-22 HIGH 7.5 CVE-2025-40777 If a `named` caching resolver is configured with `serve-stale-enable` `yes`, and with `stale-answer-client-timeout` set to `0` (the only allowable va… Mitigation only Fix from $1,9502025-07-16 MEDIUM 5.3 CVE-2025-52958 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauth… Junos 22.2+ Fix from $1,6002025-07-11 MEDIUM 6.5 CVE-2025-52964 A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Junos 21.4+ Fix from $1,6002025-07-11 MEDIUM 6.5 CVE-2025-24798 Meshtastic is an open source mesh networking solution. From 1.2.1 until 2.6.2, a packet sent to the routing module that contains want_response==true … Meshtastic Firmware 2.6.2+ Fix from $1,6002025-07-10 HIGH 7.5 CVE-2025-49630 In certain proxy configurations, a denial of service attack against Apache HTTP Server versions 2.4.26 through to 2.4.63 can be triggered by untruste… HTTP Server 2.4.64+ Fix from $1,9502025-07-10 MEDIUM 5.5 CVE-2025-38285 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix WARN() in get_bpf_raw_tp_regs syzkaller reported an issue: WARNING: C… Linux Kernel 4.20 / 5.2+ Fix from $1,6002025-07-10 MEDIUM 5.5 CVE-2025-38223 In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with unaligned file size The generic… Linux Kernel 6.12.35 / 6.15.4+ Fix from $1,6002025-07-04 MEDIUM 5.5 CVE-2022-50126 In the Linux kernel, the following vulnerability has been resolved: jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted Fo… Linux Kernel 4.14.291 / 4.19.256+ Fix from $1,6002025-06-18