1018 items
Unread (2155) All Dismissed
HIGH
CVE-2025-21863 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode specul...
NVD CVE-2025-21863 451d ago
HIGH
CVE-2025-26597 (CVSS 7.8) — A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey() is called with a 0 ...
NVD CVE-2025-26597 466d ago
HIGH
CVE-2024-12251 (CVSS 7.8) — In Progress Telerik UI for WinUI versions prior to 2025 Q1 (3.0.0), a command injection attack is po...
NVD CVE-2024-12251 479d ago
HIGH
CVE-2024-57945 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix the out of bound...
NVD CVE-2024-57945 501d ago
HIGH
CVE-2024-53213 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: usb: lan78xx: Fix double f...
NVD CVE-2024-53213 526d ago
HIGH
CVE-2024-54508 (CVSS 7.5) — The issue was addressed with improved memory handling. This issue is fixed in Safari 18.2, iOS 18.2 ...
NVD CVE-2024-54508 541d ago
HIGH
CVE-2024-49924 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: fbdev: pxafb: Fix possible use ...
NVD CVE-2024-49924 593d ago
HIGH
CVE-2024-49894 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix index out ...
NVD CVE-2024-49894 593d ago
HIGH
CVE-2024-6400 (CVSS 7.5) — Cleartext Storage of Sensitive Information, Exposure of Sensitive Information Through Data Queries v...
NVD CVE-2024-6400 610d ago
HIGH
CVE-2024-8644 (CVSS 7.5) — Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp all...
NVD CVE-2024-8644 617d ago
HIGH
CVE-2024-8609 (CVSS 7.5) — Insertion of Sensitive Information into Log File vulnerability in Oceanic Software ValeApp allows Qu...
NVD CVE-2024-8609 617d ago
HIGH
CVE-2024-7107 (CVSS 7.5) — Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Se...
NVD CVE-2024-7107 618d ago
HIGH
CVE-2024-5958 (CVSS 8.8) — Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i...
NVD CVE-2024-5958 626d ago
HIGH
CVE-2024-3306 (CVSS 7.5) — Authorization Bypass Through User-Controlled Key vulnerability in Utarit Information SoliClub allows...
NVD CVE-2024-3306 632d ago
HIGH
CVE-2024-3305 (CVSS 7.5) — Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Utarit Info...
NVD CVE-2024-3305 632d ago
HIGH
CVE-2024-7609 (CVSS 7.5) — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vidc...
NVD CVE-2024-7609 633d ago
HIGH
CVE-2024-6445 (CVSS 7.5) — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Data...
NVD CVE-2024-6445 638d ago
HIGH
CVE-2024-1744 (CVSS 7.5) — Authorization Bypass Through User-Controlled Key, Missing Authorization vulnerability in Ariva Compu...
NVD CVE-2024-1744 638d ago
HIGH
CVE-2024-6921 (CVSS 7.5) — Cleartext Storage of Sensitive Information vulnerability in NAC Telecommunication Systems Inc. NACPr...
NVD CVE-2024-6921 642d ago
HIGH
CVE-2023-52682 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait on block writ...
NVD CVE-2023-52682 750d ago
HIGH
CVE-2024-23775 (CVSS 7.5) — Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers ...
NVD CVE-2024-23775 857d ago
HIGH
CVE-2024-23744 (CVSS 7.5) — An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a ...
NVD CVE-2024-23744 866d ago
HIGH
CVE-2023-51767 (CVSS 7) — OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authen...
NVD CVE-2023-51767 895d ago
HIGH
CVE-2023-47360 (CVSS 7.5) — Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet...
NVD CVE-2023-47360 942d ago
HIGH
CVE-2023-5443 (CVSS 7.5) — Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E...
NVD CVE-2023-5443 953d ago
HIGH
CVE-2023-5570 (CVSS 7.5) — Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Inohom Home Manag...
NVD CVE-2023-5570 953d ago
HIGH
CVE-2023-46136 (CVSS 8) — Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0...
NVD CVE-2023-46136 955d ago
HIGH
CVE-2023-43615 (CVSS 7.5) — Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.
NVD CVE-2023-43615 973d ago
HIGH
CVE-2023-40271 (CVSS 7.5) — In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, w...
NVD CVE-2023-40271 1002d ago
HIGH
CVE-2023-33152 (CVSS 7) — Microsoft ActiveX Remote Code Execution Vulnerability
NVD CVE-2023-33152 1061d ago
HIGH
CVE-2023-3273 (CVSS 7.5) — Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affec...
NVD CVE-2023-3273 1062d ago
HIGH
CVE-2023-3272 (CVSS 7.5) — Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker t...
NVD CVE-2023-3272 1062d ago
HIGH
CVE-2023-3271 (CVSS 8.2) — Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gathe...
NVD CVE-2023-3271 1062d ago
HIGH
CVE-2023-35696 (CVSS 7.5) — Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to ret...
NVD CVE-2023-35696 1062d ago
HIGH
CVE-2023-2065 (CVSS 8.8) — Authorization Bypass Through User-Controlled Key vulnerability in Armoli Technology Cargo Tracking S...
NVD CVE-2023-2065 1109d ago
HIGH
CVE-2023-23447 (CVSS 7.5) — Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 11...
NVD CVE-2023-23447 1118d ago
HIGH
CVE-2023-23446 (CVSS 7.5) — Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 112...
NVD CVE-2023-23446 1118d ago
HIGH
CVE-2023-23445 (CVSS 7.5) — Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 112...
NVD CVE-2023-23445 1118d ago
HIGH
CVE-2023-26246 (CVSS 7.8) — An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.0...
NVD CVE-2023-26246 1136d ago
HIGH
CVE-2023-26245 (CVSS 7.8) — An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.0...
NVD CVE-2023-26245 1136d ago
HIGH
CVE-2023-26244 (CVSS 7.8) — An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.0...
NVD CVE-2023-26244 1136d ago
HIGH
CVE-2023-26243 (CVSS 7.8) — An issue was discovered in the Hyundai Gen5W_L in-vehicle infotainment system AE_E_PE_EUR.S5W_L001.0...
NVD CVE-2023-26243 1136d ago
HIGH
CVE-2023-1462 (CVSS 8.8) — Authorization Bypass Through User-Controlled Key vulnerability in Vadi Corporate Information Systems...
NVD CVE-2023-1462 1173d ago
HIGH
CVE-2023-23398 (CVSS 7.1) — Microsoft Excel Spoofing Vulnerability
NVD CVE-2023-23398 1180d ago
HIGH
CVE-2023-1246 (CVSS 7.5) — Files or Directories Accessible to External Parties vulnerability in Saysis Starcities allows Collec...
NVD CVE-2023-1246 1183d ago
HIGH
CVE-2023-26314 (CVSS 8.8) — The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the ap...
NVD CVE-2023-26314 1200d ago
HIGH
CVE-2022-47630 (CVSS 7.4) — Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certif...
NVD CVE-2022-47630 1237d ago
HIGH
CVE-2022-3775 (CVSS 7.1) — When rendering certain unicode sequences, grub2's font code doesn't proper validate if the informed ...
NVD CVE-2022-3775 1265d ago
HIGH
CVE-2022-2601 (CVSS 8.6) — A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to...
NVD CVE-2022-2601 1269d ago
HIGH
CVE-2022-44702 (CVSS 7.8) — Windows Terminal Remote Code Execution Vulnerability
NVD CVE-2022-44702 1271d ago
HIGH NVD Wed, 12 Mar 2025 10:15:19 UTC
CVE-2025-21863 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode specul...
https://nvd.nist.gov/vuln/detail/CVE-2025-21863
TL;DR
In the Linux kernel, the following vulnerability has been resolved: io_uring: prevent opcode speculation sqe->opcode is used for different tables, make sure we santitise it against speculations.
CVE-2025-21863
Read full story ↗