Sat, Oct 04 · 08:15 AM CDTCVE-2025-39946
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: tls: make sure to abort the stream if headers are bogus Normally we wait for the socket to buffer up the whole record before we service it. If the socket has a tiny buffer, however, we read out the data sooner, to prevent connection stalls. Make sure t
CVECVE-2025-39946
SeverityCRITICAL
TypeUPDATED
PublishedSat, Oct 04 · 08:15 AM CDT
ModifiedMon, Apr 06 · 01:30 PM CDT
CVE-2025-56212
9.8/10 · Must read/watchNVDvuln
Summary
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in add-doctor.php via the docname parameter.
CVECVE-2025-56212
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 25 · 03:15 PM CDT
ModifiedMon, Apr 06 · 02:16 PM CDT
CVE-2025-56214
9.8/10 · Must read/watchNVDvuln
Summary
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in index.php via the username parameter.
CVECVE-2025-56214
SeverityCRITICAL
TypeUPDATED
PublishedMon, Aug 25 · 03:15 PM CDT
ModifiedMon, Apr 06 · 02:16 PM CDT
CVE-2026-21622
9.8/10 · Must read/watchNVDvuln
Summary
Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover. Password reset tokens generated via the "Reset your password" flow do not expire. When a user requests a password reset, Hex sends an email containing a reset link with a token. Thi
CVECVE-2026-21622
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 05 · 10:16 PM CST
ModifiedMon, Apr 06 · 05:17 PM CDT
CVE-2024-1509
9.1/10 · Must read/watchNVDvuln
Summary
Brocade ASCG before 3.2.0 Web Interface is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hi
CVECVE-2024-1509
SeverityCRITICAL
TypeUPDATED
PublishedFri, Feb 28 · 10:15 PM CST
ModifiedMon, Apr 06 · 02:16 PM CDT
CVE-2025-54236
9.1/10 · Must read/watchNVDvuln
Summary
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue doe
CVECVE-2025-54236
SeverityCRITICAL
TypeUPDATED
PublishedTue, Sep 09 · 02:15 PM CDT
ModifiedMon, Apr 06 · 01:00 PM CDT
CVE-2025-57148
9.1/10 · Must read/watchNVDvuln
Summary
phpgurukul Online Shopping Portal 2.0 is vulnerable to Arbitrary File Upload in /admin/insert-product.php, due to the lack of extension validation.
CVECVE-2025-57148
SeverityCRITICAL
TypeUPDATED
PublishedWed, Sep 03 · 03:15 PM CDT
ModifiedMon, Apr 06 · 03:17 PM CDT
CVE-2025-6391
9.1/10 · Must read/watchNVDvuln
Summary
Brocade ASCG before 3.3.0 logs JSON Web Tokens (JWT) in log files. An attacker with access to the log files can withdraw the unencrypted tokens with security implications, such as unauthorized access, session hijacking, and information disclosure.
CVECVE-2025-6391
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 17 · 10:15 PM CDT
ModifiedMon, Apr 06 · 02:16 PM CDT
CVE-2025-7398
9.1/10 · Must read/watchNVDvuln
Summary
Brocade ASCG before 3.3.0 allows for the use of medium strength cryptography algorithms on internal ports ports 9000 and 8036.
CVECVE-2025-7398
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 17 · 10:15 PM CDT
ModifiedMon, Apr 06 · 02:16 PM CDT
CVE-2025-22040
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix session use-after-free in multichannel connection There is a race condition between session setup and ksmbd_sessions_deregister. The session can be freed before the connection is added to channel list of session. This patch check reference c
CVECVE-2025-22040
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 16 · 03:15 PM CDT
ModifiedMon, Apr 06 · 02:29 PM CDT
CVE-2025-57151
8.8/10 · Worth your timeNVDvuln
Summary
phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in admin/userprofile.php via the fullname parameter.
CVECVE-2025-57151
SeverityHIGH
TypeUPDATED
PublishedWed, Sep 03 · 03:15 PM CDT
ModifiedMon, Apr 06 · 03:17 PM CDT
CVE-2025-56216
8.5/10 · Worth your timeNVDvuln
Summary
phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection in about-us.php via the pagetitle parameter.
CVECVE-2025-56216
SeverityHIGH
TypeUPDATED
PublishedMon, Aug 25 · 03:15 PM CDT
ModifiedMon, Apr 06 · 02:16 PM CDT
CVE-2025-57146
8.1/10 · Worth your timeNVDvuln
Summary
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter.
CVECVE-2025-57146
SeverityHIGH
TypeUPDATED
PublishedWed, Sep 03 · 03:15 PM CDT
ModifiedMon, Apr 06 · 03:17 PM CDT
CVE-2026-2459
8.1/10 · Worth your timeNVDvuln
Summary
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.
CVECVE-2026-2459
SeverityHIGH
TypeUPDATED
PublishedTue, Feb 24 · 02:16 PM CST
ModifiedMon, Apr 06 · 01:55 PM CDT
CVE-2023-26243
7.8/10 · Worth your timeNVDvuln
Summary
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The decryption binary used to decrypt firmware files has an information leak that allows an attacker to read the AES key and initialization vector from memory. An attacker may exploit this to create custom fir
CVECVE-2023-26243
SeverityHIGH
TypeUPDATED
PublishedThu, Apr 27 · 01:15 AM CDT
ModifiedMon, Apr 06 · 02:23 PM CDT
CVE-2023-26244
7.8/10 · Worth your timeNVDvuln
Summary
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppDMClient binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check of AppUpgrade and .lge.upgrade.xml files, which are use
CVECVE-2023-26244
SeverityHIGH
TypeUPDATED
PublishedThu, Apr 27 · 01:15 AM CDT
ModifiedMon, Apr 06 · 02:22 PM CDT
CVE-2023-26245
7.8/10 · Worth your timeNVDvuln
Summary
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the version check in order to install any firmware version (e.g., newer, older, or c
CVECVE-2023-26245
SeverityHIGH
TypeUPDATED
PublishedThu, Apr 27 · 01:15 AM CDT
ModifiedMon, Apr 06 · 02:23 PM CDT
CVE-2023-26246
7.8/10 · Worth your timeNVDvuln
Summary
An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.001.211214. The AppUpgrade binary file, which is used during the firmware installation process, can be modified by an attacker to bypass the digital signature check. This indirectly allows an attacker to install custom fi
CVECVE-2023-26246
SeverityHIGH
TypeUPDATED
PublishedThu, Apr 27 · 01:15 AM CDT
ModifiedMon, Apr 06 · 02:30 PM CDT
CVE-2023-53510
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix handling of lrbp->cmd ufshcd_queuecommand() may be called two times in a row for a SCSI command before it is completed. Hence make the following changes: - In the functions that submit a command, do not check the old value of lrbp-
CVECVE-2023-53510
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 01 · 12:15 PM CDT
ModifiedMon, Apr 06 · 01:57 PM CDT
CVE-2023-53515
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: don't break lifecycle of vm_dev vm_dev has a separate lifecycle because it has a 'struct device' embedded. Thus, having a release callback for it is correct. Allocating the vm_dev struct with devres totally breaks this protection, though.
CVECVE-2023-53515
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 01 · 12:15 PM CDT
ModifiedMon, Apr 06 · 01:04 PM CDT
CVE-2023-53516
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF The previous commit 954d1fa1ac93 ("macvlan: Add netlink attribute for broadcast cutoff") added one additional attribute named IFLA_MACVLAN_BC_CUTOFF to allow broadcast cutfoff. However, it fo
CVECVE-2023-53516
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 01 · 12:15 PM CDT
ModifiedMon, Apr 06 · 02:45 PM CDT
CVE-2023-53522
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex syzbot is reporting circular locking dependency between cpu_hotplug_lock and freezer_mutex, for commit f5d39b020809 ("freezer,sched: Rewrite core freezer logic") replaced atomic_inc() in freeze
CVECVE-2023-53522
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 01 · 12:15 PM CDT
ModifiedMon, Apr 06 · 01:14 PM CDT
CVE-2023-53524
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf An integer overflow occurs in the iwl_write_to_user_buf() function, which is called by the iwl_dbgfs_monitor_data_read() function. static bool iwl_write_to_user_buf(char __user *user_bu
CVECVE-2023-53524
SeverityHIGH
TypeUPDATED
PublishedWed, Oct 01 · 12:15 PM CDT
ModifiedMon, Apr 06 · 01:22 PM CDT
CVE-2025-21979
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel wiphy_work before freeing wiphy A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the rdev::wiphy_work is getting queued. If wiphy_free is called b
CVECVE-2025-21979
SeverityHIGH
TypeUPDATED
PublishedTue, Apr 01 · 04:15 PM CDT
ModifiedMon, Apr 06 · 01:39 PM CDT
CVE-2025-22069
7.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler Naresh Kamboju reported a "Bad frame pointer" kernel warning while running LTP trace ftrace_stress_test.sh in riscv. We can reproduce the same issue with t
CVECVE-2025-22069
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 16 · 03:16 PM CDT
ModifiedMon, Apr 06 · 01:43 PM CDT
