Ctrl + K

Latest intel// live feed

25 results//sorted by published//last sync 2026-10-20 22:13Z
2025-07-28
2025-07-28 12:15Z
HIGH

CVE-2025-38495 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38495

In the Linux kernel, the following vulnerability has been resolved: HID: core: ensure the allocated report buffer can contain the reserved report ID When the report ID is not used, the low level transport drivers expect the first byte to be 0. However, currently the allocated buffer not account for that extra byte, meaning that instead of having 8 guaranteed bytes for implement to be working, we only have 7. CVSSv3.1 8.8 (HIGH) · EPSS 10th percentile

TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-28
2025-07-28 12:15Z
HIGH

CVE-2025-38491 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38491

In the Linux kernel, the following vulnerability has been resolved: mptcp: make fallback action and fallback decision atomic Syzkaller reported the following splat: WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 __mptcp_do_fallback net/mptcp/protocol.h:1223 [inline] WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 mptcp_do_fallback net/mptcp/protocol.h:1244 [inline] WARNING: CPU: 1 PID: 7704 at net/mptcp/protocol.h:1223 check_fully_established net/mptcp CVSSv3.1 8.2 (HIGH) · EPSS 1th percentile

CWECWE 667TYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-07-28
2025-07-28 12:15Z
CRIT

CVE-2025-38490 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38490

In the Linux kernel, the following vulnerability has been resolved: net: libwx: remove duplicate page_pool_put_full_page() page_pool_put_full_page() should only be invoked when freeing Rx buffers or building a skb if the size is too short. At other times, the pages need to be reused. So remove the redundant page put. In the original code, double free pages cause kernel panic: [ 876.949834] __irq_exit_rcu+0xc7/0x130 [ 876.949836] common_interrupt+0xb8/0xd0 [ 876.949838 CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 415TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-28
2025-07-28 12:15Z
CRIT

CVE-2025-38488 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38488

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in crypt_message when using async crypto The CVE-2024-50047 fix removed asynchronous crypto handling from crypt_message(), assuming all crypto operations are synchronous. However, when hardware crypto accelerators are used, this can cause use-after-free crashes: crypt_message() // Allocate the creq buffer containing the req creq = smb2_get_aead_req(..., &req); CVSSv3.1 9.8 (CRITICAL) · EPSS 20th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-28
2025-07-28 12:15Z
CRIT

CVE-2025-38476 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38476

In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in selftest with KASAN triggers the splat below [0]. rpl_do_srh_inline() fetches ipv6_hdr(skb) and accesses it after skb_cow_head(), which is illegal as the header could be freed then. Let's fix it by making oldhdr to a local struct instead of a pointer. [0]: [root@fedora net]# ./lwt_dst_cache_ref_loop.sh ... TEST: rpl (inp CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-28
2025-07-28 12:15Z
CRIT

CVE-2025-38472 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38472

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry A crash in conntrack was reported while trying to unlink the conntrack entry from the hash bucket list: [exception RIP: __nf_ct_delete_from_lists+172] [..] #7 [ff539b5a2b043aa0] nf_ct_delete at ffffffffc124d421 [nf_conntrack] #8 [ff539b5a2b043ad0] nf_ct_gc_expired at ffffffffc124d999 [nf_conntrack] #9 [ff539b5a2b043ae0] __nf CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 908TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-28
2025-07-28 12:15Z
CRIT

CVE-2025-38471 — Linux Linux_kernel: BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38471

In the Linux kernel, the following vulnerability has been resolved: tls: always refresh the queue when reading sock After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry. BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/ CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 416TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
728 × 90 / responsive · programmatic ad slot
2025-07-28
2025-07-28 11:15Z
CRIT

CVE-2025-6918 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-6918

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncvav Virtual PBX Software allows SQL Injection. This issue affects Virtual PBX Software: before 09.07.2025. CVSSv3.1 9.8 (CRITICAL) · EPSS 48th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-28
2025-07-28 05:16Z
HIGH

CVE-2025-8267 — Felipperegazio Ssrf_check: Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF)

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-8267

Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 (Multicast) as invalid. This oversight allows attackers to craft requests targeting these multicast addresses. CVSSv3.1 8.2 (HIGH) · EPSS 30th percentile

CWECWE 918VNDFelipperegazioTYPVulnerability
8.2
CVSS v3.1
91
Edit Score
2025-07-25
2025-07-25 16:15Z
CRIT

CVE-2025-38439 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38439

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT When transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper length instead of 0. This bug triggers this warning on a system with IOMMU enabled: WARNING: CPU: 36 PID: 0 at drivers/iommu/dma-iommu.c:842 __iommu_dma_unmap+0x159/0x170 RIP: 0010:__iommu_dma_unmap+0x159/0x170 Code: a8 00 00 00 00 48 c7 45 b0 00 00 00 00 48 c7 45 c8 00 CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-25
2025-07-25 16:15Z
HIGH

CVE-2025-38437 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38437

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potential use-after-free in oplock/lease break ack If ksmbd_iov_pin_rsp return error, use-after-free can happen by accessing opinfo->state and opinfo_put and ksmbd_fd_put could called twice. CVSSv3.1 8.8 (HIGH) · EPSS 5th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-25
2025-07-25 15:15Z
CRIT

CVE-2025-38430 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38430

In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4 compound request, then examining the cstate can have undefined results. This patch adds a check that the rpc procedure being executed (rq_procinfo) is the NFSPROC4_COMPOUND procedure. CVSSv3.1 9.8 (CRITICAL) · EPSS 7th percentile

TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-25
2025-07-25 15:15Z
CRIT

CVE-2025-38429 — Linux Linux_kernel: Updating rd_offset prematurely can lead to the host accessing an uninitialized or incomplete element

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38429

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: ep: Update read pointer only after buffer is written Inside mhi_ep_ring_add_element, the read pointer (rd_offset) is updated before the buffer is written, potentially causing race conditions where the host sees an updated read pointer before the buffer is actually written. Updating rd_offset prematurely can lead to the host accessing an uninitialized or incomplete element, resulting in data corrup CVSSv3.1 10.0 (CRITICAL) · EPSS 5th percentile

CWECWE 908TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-07-25
2025-07-25 14:15Z
CRIT

CVE-2025-38411 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38411

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix double put of request If a netfs request finishes during the pause loop, it will have the ref that belongs to the IN_PROGRESS flag removed at that point - however, if it then goes to the final wait loop, that will *also* put the ref because it sees that the IN_PROGRESS flag is clear and incorrectly assumes that this happened when it called the collector. In fact, since IN_PROGRESS is clear, we s CVSSv3.1 9.8 (CRITICAL) · EPSS 5th percentile

CWECWE 415TYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-25
2025-07-25 13:15Z
HIGH

CVE-2025-38395 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38395

In the Linux kernel, the following vulnerability has been resolved: regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods drvdata::gpiods is supposed to hold an array of 'gpio_desc' pointers. But the memory is allocated for only one pointer. This will lead to out-of-bounds access later in the code if 'config::ngpios' is > 1. So fix the code to allocate enough memory to hold 'config::ngpios' of GPIO descriptors. While at it, also move the check for memory allocat CVSSv3.1 8.4 (HIGH) · EPSS 6th percentile

CWECWE 125TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-07-25
2025-07-25 13:15Z
HIGH

CVE-2025-38377 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38377

In the Linux kernel, the following vulnerability has been resolved: rose: fix dangling neighbour pointers in rose_rt_device_down() There are two bugs in rose_rt_device_down() that can cause use-after-free: 1. The loop bound `t->count` is modified within the loop, which can cause the loop to terminate early and miss some entries. 2. When removing an entry from the neighbour array, the subsequent entries are moved up to fill the gap, but the loop index `i` is still CVSSv3.1 8.8 (HIGH) · EPSS 6th percentile

CWECWE 416TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-25
2025-07-25 13:15Z
HIGH

CVE-2025-38375 — Linux Linux_kernel: This can lead to an out-of-bound read.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38375

In the Linux kernel, the following vulnerability has been resolved: virtio-net: ensure the received length does not exceed allocated size In xdp_linearize_page, when reading the following buffers from the ring, we forget to check the received length with the true allocate size. This can lead to an out-of-bound read. This commit adds that missing check. CVSSv3.1 8.4 (HIGH) · EPSS 7th percentile

CWECWE 125TYPVulnerability
8.4
CVSS v3.1
92
Edit Score
2025-07-25
2025-07-25 13:15Z
HIGH

CVE-2025-38367 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38367

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused as array index when modify register EIOINTC_ENABLE. There will be array index overflow problem. CVSSv3.1 8.8 (HIGH) · EPSS 4th percentile

CWECWE 129TYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-25
2025-07-25 13:15Z
CRIT

CVE-2025-38365 — Linux Linux_kernel: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-38365

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix a race between renames and directory logging We have a race between a rename and directory inode logging that if it happens and we crash/power fail before the rename completes, the next time the filesystem is mounted, the log replay code will end up deleting the file that was being renamed. This is best explained following a step by step analysis of an interleaving of steps that lead into this s CVSSv3.1 9.1 (CRITICAL) · EPSS 2th percentile

CWECWE 362TYPVulnerability
9.1
CVSS v3.1
96
Edit Score
2025-07-25
2025-07-25 07:15Z
HIGH

CVE-2025-5835 — Themeum Droip: The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5835

The Droip plugin for WordPress is vulnerable to unauthorized modification and access of data due to a missing capability check on the droip_post_apis() function in all versions up to, and including, 2.2.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform many actions as the AJAX hooks to several functions. Some potential impacts include arbitrary post deletion, arbitrary post creation, post duplication, settings update, us CVSSv3.1 8.8 (HIGH)

CWECWE 862VNDThemeumVNDDroipTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-25
2025-07-25 07:15Z
HIGH

CVE-2025-5831 — Themeum Droip: The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5831

The Droip plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the make_google_font_offline() function in all versions up to, and excluding, 2.5.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVSSv3.1 8.8 (HIGH)

CWECWE 434VNDThemeumVNDDroipTYPVulnerability
8.8
CVSS v3.1
94
Edit Score
2025-07-24
2025-07-24 15:15Z
HIGH

CVE-2025-51087 — Tenda Ac8_firmware: The manipulation of the argument time leads to stack-based buffer overflow.

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-51087

Tenda AC8V4 V16.03.34.06` was discovered to contain stack overflow at /goform/saveParentControlInfo. The manipulation of the argument time leads to stack-based buffer overflow. CVSSv3.1 8.6 (HIGH) · EPSS 94th percentile

CWECWE 121VNDTendaTYPVulnerability
8.6
CVSS v3.1
96
Edit Score
2025-07-24
2025-07-24 14:15Z
CRIT

CVE-2025-4784 — Moderec Tourtella: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-4784

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Moderec Tourtella allows SQL Injection. This issue affects Tourtella: before 26.05.2025. CVSSv3.1 9.8 (CRITICAL) · EPSS 56th percentile

CWECWE 89VNDModerecTYPVulnerability
9.8
CVSS v3.1
99
Edit Score
2025-07-24
2025-07-24 13:15Z
CRIT

CVE-2025-5243 — Upload: Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-5243

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SMG Software Information Portal allows Code Injection, Upload a Web Shell to a Web Server, Code Inclusion. This issue affects Information Portal: before 13.06.2025. CVSSv3.1 10.0 (CRITICAL) · EPSS 85th percentile

CWECWE 434CWECWE 78TYPVulnerability
10.0
CVSS v3.1
100
Edit Score
2025-07-24
2025-07-24 13:15Z
CRIT

CVE-2025-4822 — Neutralization: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in

NVD (auto-promoted CVEs)·nvd.nist.govCVE-2025-4822

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bayraktar Solar Energies ScadaWatt Otopilot allows SQL Injection. This issue affects ScadaWatt Otopilot: before 27.05.2025. CVSSv3.1 9.8 (CRITICAL) · EPSS 28th percentile

CWECWE 89TYPVulnerability
9.8
CVSS v3.1
99
Edit Score