CVEs published in February 2025
3,569 vulnerabilities, 260 critical, 15 exploited.
- linux, linux kernel +1 morenfc: nci: add flush_workqueue to prevent uaf7.8 High
- linux, linux kernel +1 moredrm/amdkfd: Check for potential null return of kmalloc_array()5.5 Medium
- linux, linux kernel +1 moreDrivers: hv: vmbus: Deactivate sysctl_record_panic_msg by default in isolated guests7.1 High
- linux, linux kernel +1 morescsi: target: tcmu: Fix possible page UAF7.8 High
- linux, linux kernel +1 moremm: fix unexpected zeroed page mapping with zram swap7.1 High
- linux, linux kernel +1 morenet: usb: aqc111: Fix out-of-bounds accesses in RX fixup6.8 Medium
- linux, linux kernel +1 morememory: renesas-rpc-if: fix platform-device leak in error path5.5 Medium
- linux, linux kernel +1 moreipv6: fix panic when forwarding a pkt with no in6 dev7.5 High
- linux, linux kernel +1 moreep93xx: clock: Fix UAF in ep93xx_clk_register_gate()7.8 High
- linux, linux kernel +1 morei2c: dev: check return value when calling dev_set_name()5.5 Medium
- linux, linux kernel +1 morejffs2: fix use-after-free in jffs2_clear_xattr_subsystem7.8 High
- linux, linux kernel +1 moremedia: venus: vdec: fixed possible memory leak issue5.5 Medium
- linux, linux kernel +1 moresamples/landlock: Fix path_list memory leak5.5 Medium
- linux, linux kernel +1 moremedia: davinci: vpif: fix use-after-free on driver unbind7.8 High
- linux, linux kernel +1 morevideo: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()5.5 Medium
- linux, linux kernel +1 moresoc: qcom: rpmpd: Check for null return of devm_kcalloc5.5 Medium
- linux, linux kernel +1 moreASoC: soc-compress: prevent the potentially use of null pointer5.5 Medium
- linux, linux kernel +1 moregpu: host1x: Fix a memory leak in 'host1x_remove()'5.5 Medium
- linux, linux kernel +1 moreclk: qcom: ipq8074: fix PCI-E clock oops5.5 Medium
- linux, linux kernel +1 moremedia: staging: media: zoran: calculate the right buffer number for zoran_reap_stat_com5.5 Medium
- linux, linux kernel +1 moremedia: staging: media: zoran: move videodev alloc5.5 Medium
- linux, linux kernel +1 moremedia: ir_toy: free before error exiting5.5 Medium
- linux, linux kernel +1 morevideo: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow7.8 High
- linux, linux kernel +1 morevideo: fbdev: cirrusfb: check pixclock to avoid divide by zero5.5 Medium
- linux, linux kernel +1 morepowerpc/kasan: Fix early region not updated correctly7.8 High
- linux, linux kernel +1 moreubifs: rename_whiteout: Fix double free for whiteout_ui->data7.8 High
- linux, linux kernel +1 moreubifs: Fix deadlock in concurrent rename whiteout and inode writeback5.5 Medium
- linux, linux kernel +1 moreubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()7.1 High
- linux, linux kernel +1 moreubifs: Fix to add refcount once page is set private7.8 High
- linux, linux kernel +1 moreubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl7.8 High
- linux, linux kernel +1 moreath5k: fix OOB in ath5k_eeprom_read_pcal_info_51117.1 High
- linux, linux kernel +1 morepowerpc/set_memory: Avoid spinlock recursion in change_page_attr()5.5 Medium
- linux, linux kernel +1 moreARM: davinci: da850-evm: Avoid NULL pointer dereference5.5 Medium
- canon inc. generic lipslx v4 printer driver, generic pcl6 v4 printer driver, generic ufr ii v4 printer driver +2 moreOut-of-bounds vulnerability in curve segmentation processing of Generic PCL6 V4 Printer Driver / Generic UFR II V4 Printer Driver / Generic LIPSLX V4 Printer Driver.5.3 Medium
- delta electronics cncsoft-g2Heap-based Buffer Overflow in CNCSoft-G28.4 High
- beyondtrust privilege management for windowsPrivilege Management for Windows – Elevation of Privilege7.2 High
libredwgOSS-FuzzIndex-out-of-bounds in dwg_decode_eedNo score- emlogA Server-Side Request Forgery (SSRF) in the component sort.php of Emlog Pro v2.5.4 allows...6.8 Medium
- emlogA cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute...7.1 High
- emlogA cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute...7.3 High
- emlogA cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute...5.1 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the...5.1 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the...5.1 Medium
- seacmsSeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the...5.3 Medium
- seacmsSeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the...6.0 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the...5.1 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the...5.1 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the...5.1 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the...5.1 Medium
- seacmsSeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen...4.4 Medium
- Show moreLoading…