Browse CVEs

CRITICAL 9.8 CVE-2023-54269 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: double free xprt_ctxt while still in use When an RPC request is deferre… Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2023-54258 In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break With deferred close we can have c… No fix yet Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2023-54257 In the Linux kernel, the following vulnerability has been resolved: net: macb: fix a memory corruption in extended buffer descriptor mode For quite… No fix yet Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2023-54237 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() There i… Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2023-54223 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix invalid buffer access for legacy rq The below crash can be … No fix yet Fix from $2,3002025-12-30 CRITICAL 9.1 CVE-2023-54203 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr When smb1 mount fails, KASAN… No fix yet Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2023-54184 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsit: Free cmds before session free Commands from recovery entr… No fix yet Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15247 A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::cl… Snap7 Rs Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15359 DVP-12SE11T - Out-of-bound memory write Vulnerability Dvp 12se11t Firmware 2.16+ Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15243 A flaw has been found in code-projects Simple Stock System 1.0. This affects an unknown function of the file /market/login.php. Executing a manipulat… Simple Stock System Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15103 DVP-12SE11T - Authentication Bypass via Partial Password Disclosure Dvp 12se11t Firmware 2.16+ Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15102 DVP-12SE11T - Password Protection Bypass Dvp 12se11t Firmware 2.16+ Fix from $2,3002025-12-30 CRITICAL 9.1 CVE-2025-69234 Whale browser before 4.35.351.12 allows an attacker to escape the iframe sandbox in a sidebar environment. Whale 4.35.351.12+ Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15212 A vulnerability was detected in code-projects Refugee Food Management System 1.0. This issue affects some unknown processing of the file /home/regfoo… Refugee Food Management System Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15211 A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing m… Refugee Food Management System Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15210 A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This vulnerability affects unknown code of the file /… Refugee Food Management System Mitigation only Fix from $2,3002025-12-30 CRITICAL 9.8 CVE-2025-15209 A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown part of the file /home/editfood.php. This… Refugee Food Management System Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-15208 A security flaw has been discovered in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of the … Refugee Food Management System Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-68860 Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.Th… Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.9 CVE-2025-68562 Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG… Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-15207 A vulnerability has been found in Campcodes Supplier Management System 1.0. Affected is an unknown function of the file /admin/view_products.php. The… Supplier Management System Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-15206 A flaw has been found in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /admin/add_area.php. Executing a mani… Supplier Management System Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2024-27480 givanz VvvebJs 1.7.2 is vulnerable to Insecure File Upload. Vvvebjs No fix yet Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2024-25182 givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php. Vvvebjs Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.1 CVE-2024-25181 A critical vulnerability has been identified in givanz VvvebJs 1.7.2, which allows both Server-Side Request Forgery (SSRF) and arbitrary file reading… Vvvebjs after 1.7.4 Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-68706 A stack-based buffer overflow exists in the GoAhead-Webs HTTP daemon on KuWFi 4G LTE AC900 devices with firmware 1.0.13. The /goform/formMultiApnSett… Ac900 Firmware Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-15198 A weakness has been identified in code-projects College Notes Uploading System 1.0. This issue affects some unknown processing of the file /login.php… College Notes Uploading System Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-15196 A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file login.php. Such manipulation of t… Assessment Management Mitigation only Fix from $2,3002025-12-29 CRITICAL 9.8 CVE-2025-69201 Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected in tugtai… Tugtainer 1.15.1+ Fix from $2,3002025-12-29 CRITICAL 9.9 CVE-2025-68897 Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I. Okfie IF AS Shortcode if-as-shortcode allows Code Injection.Th… Mitigation only Fix from $2,3002025-12-29