Browse CVEs

HIGH 8.0 CVE-2025-20704 In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has conne… Nr17 Mitigation only Fix from $1,9502025-09-01 CRITICAL 9.8 CVE-2025-9748 A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the compo… Ch22 Firmware Mitigation only Fix from $2,3002025-08-31 HIGH 7.8 CVE-2025-9732 A vulnerability was identified in DCMTK up to 3.6.9. This affects an unknown function in the library dcmimage/include/dcmtk/dcmimage/diybrpxt.h of th… Dcmtk after 3.6.9 Fix from $1,9502025-08-31 HIGH 8.1 CVE-2025-30273 An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, t… Qts Mitigation only Fix from $1,9502025-08-29 CRITICAL 9.1 CVE-2025-58050 The PCRE2 library is a set of C functions that implement regular expression pattern matching. In version 10.45, a heap-buffer-overflow read vulnerabi… Pcre2 Patch available Fix from $2,3002025-08-27 HIGH 7.8 CVE-2025-38676 In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Avoid stack buffer overflow from kernel cmdline While the kernel com… Linux Kernel 5.5 / 5.10.241+ Fix from $1,9502025-08-26 MEDIUM 5.5 CVE-2025-9389 A vulnerability was identified in vim 9.1.0000. Affected is the function __memmove_avx_unaligned_erms of the file memmove-vec-unaligned-erms.S. The m… Vim Patch available Fix from $1,6002025-08-24 HIGH 7.5 CVE-2025-55599 D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formWlanSetup function via the parameter f_wds_wepKey. Dir 619l Firmware No fix yet Fix from $1,9502025-08-22 HIGH 7.5 CVE-2025-55602 D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formSysCmd function via the submit-url parameter. Dir 619l Firmware No fix yet Fix from $1,9502025-08-22 HIGH 7.5 CVE-2025-55611 D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter. Dir 619l Firmware No fix yet Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38667 In the Linux kernel, the following vulnerability has been resolved: iio: fix potential out-of-bound write The buffer is set to 20 characters. If a … Linux Kernel 6.15.9+ Fix from $1,9502025-08-22 HIGH 7.8 CVE-2025-38662 In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv Given … Linux Kernel 6.12.41 / 6.15.9+ Fix from $1,9502025-08-22 CRITICAL 9.8 CVE-2025-29365 spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL. Spim after 9.1.24 Fix from $2,3002025-08-22 CRITICAL 9.3 CVE-2010-20115 Arcane Software’s Vermillion FTP Daemon (vftpd) versions up to and including 1.31 contains a memory corruption vulnerability triggered by a malformed… No fix yet Fix from $2,3002025-08-21 HIGH 7.8 CVE-2025-9300 A vulnerability was found in saitoha libsixel up to 1.10.3. Affected by this issue is the function sixel_debug_print_palette of the file src/encoder.… Libsixel 1.8.7+ Fix from $1,9502025-08-21 CRITICAL 10.0 CVE-2025-43300 KEVEPSS 20% An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS… Ipados 13.7.8 / 14.7.8+ Fix from $2,3002025-08-21 HIGH 8.8 CVE-2025-9132 Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 139.0.7258.138+ Fix from $1,9502025-08-20 HIGH 7.8 CVE-2025-9175 A vulnerability was identified in neurobin shc up to 4.0.3. This issue affects the function make of the file src/shc.c. The manipulation leads to sta… Shc after 4.0.3 Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38585 In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() When g… Linux Kernel 6.12.42 / 6.15.10+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-38568 In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCA_MQPRIO… Linux Kernel 6.6.102 / 6.12.42+ Fix from $1,9502025-08-19 HIGH 7.8 CVE-2025-53705 In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions prior to 12.6.1204.204, the affected applications lack proper validation of… Argon 12.2.1204.204+ Fix from $1,9502025-08-18 HIGH 8.1 CVE-2025-47206 An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the… File Station 5.5.6.4933+ Fix from $1,9502025-08-18 CRITICAL 9.8 CVE-2025-9088 A vulnerability was found in Tenda AC20 16.03.08.12. This vulnerability affects the function save_virtualser_data of the file /goform/formSetVirtualS… Ac20 Firmware Mitigation only Fix from $2,3002025-08-16 HIGH 7.8 CVE-2025-38538 In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe() The nbpf->chan[] array is … Linux Kernel 5.4.297 / 5.10.241+ Fix from $1,9502025-08-16 HIGH 7.8 CVE-2025-38533 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix the using of Rx buffer DMA The wx_rx_buffer structure contained… Linux Kernel 6.6.100 / 6.12.40+ Fix from $1,9502025-08-16 MEDIUM 5.9 CVE-2025-9019 A vulnerability has been found in tcpreplay 4.5.1. This vulnerability affects the function mask_cidr6 of the file cidr.c of the component tcpprep. Th… Tcpreplay Patch available Fix from $1,6002025-08-15 HIGH 7.5 CVE-2025-9001 A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applicatio… Lemonos No fix yet Fix from $1,9502025-08-15 HIGH 8.8 CVE-2025-8901 Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted … Chrome 139.0.7258.127+ Fix from $1,9502025-08-13 HIGH 7.8 CVE-2025-54222 Substance3D - Stager versions 3.1.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… Substance 3d Stager 3.1.4+ Fix from $1,9502025-08-12 HIGH 7.8 CVE-2025-54221 InCopy versions 20.4, 19.5.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the co… Incopy 19.5.5 / 20.5+ Fix from $1,9502025-08-12