CVEs published in August 2025
3,709 vulnerabilities, 421 critical, 13 exploited.
- linux, linux kernel +1 morenvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails8.8 High
- linux, linux kernel +1 morewifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()7.3 High
- linux, linux kernel +1 morewifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()7.8 High
- linux, linux kernel +1 morepinctrl: canaan: k230: add NULL check in DT parse5.5 Medium
- linux, linux kernel +1 morepinctrl: canaan: k230: Fix order of DT parse and pinctrl register5.5 Medium
- debian linux, linux kernel +1 moreproc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al7.8 High
- debian linux, linux kernel +1 moref2fs: fix to avoid out-of-boundary access in devs.path7.3 High
- linux, linux kernel +1 morelandlock: Fix warning from KUnit tests5.5 Medium
- debian linux, linux kernel +1 morehfsplus: remove mutex_lock check in hfsplus_free_extents5.5 Medium
- linux, linux kernel +1 morearm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for Coresight5.5 Medium
- linux, linux kernel +1 morespi: stm32: Check for cfg availability in stm32_spi_probe5.5 Medium
- linux, linux kernel +1 morewifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi5.5 Medium
- linux, linux kernel +1 morewifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band5.5 Medium
- debian linux, linux kernel +1 morenet/mlx5: Check device memory pointer before usage5.5 Medium
- debian linux, linux kernel +1 morewifi: mac80211: reject TDLS operations when station is not associated5.5 Medium
- linux, linux kernel +1 morewifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()8.8 High
- linux, linux kernel +1 morewifi: mac80211: fix WARN_ON for monitor mode on some devices5.5 Medium
- linux, linux kernel +1 moreBluetooth: btusb: Fix potential NULL dereference on kmalloc failure5.5 Medium
- linux, linux kernel +1 morebpf: Disable migration in nf_hook_run_bpf().7.8 High
- debian linux, linux kernel +1 morenetfilter: xt_nfacct: don't assume acct name is null-terminated7.1 High
- linux, linux kernel +1 moreipv6: add a retry logic in net6_rt_notify()5.5 Medium
- linux, linux kernel +1 morerv: Use strings in da monitors tracepoints7.1 High
- debian linux, linux kernel +1 moreclk: davinci: Add NULL check in davinci_lpsc_clk_register()5.5 Medium
- debian linux, linux kernel +1 morepower: supply: cpcap-charger: Fix null check for power_supply_get_by_name5.5 Medium
- linux, linux kernel +1 moreclk: spacemit: mark K1 pll1_d8 as critical5.5 Medium
- linux, linux kernel +1 morepinmux: fix race causing mux_owner NULL with active mux_usecount4.7 Medium
- linux, linux kernel +1 moreclk: imx95-blk-ctl: Fix synchronous abort5.5 Medium
- debian linux, linux kernel +1 morefbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref5.5 Medium
- linux, linux kernel +1 moreALSA: usb: scarlett2: Fix missing NULL check5.5 Medium
- linux, linux kernel +1 morevdpa/mlx5: Fix release of uninitialized resources on error path5.5 Medium
- linux, linux kernel +1 moref2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic7.8 High
- linux, linux kernel +1 moref2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode5.5 Medium
- linux, linux kernel +1 morevfio/pds: Fix missing detach_ioas op5.5 Medium
- debian linux, linux kernel +1 morePCI: pnv_php: Clean up allocated IRQs on unplug5.5 Medium
- debian linux, linux kernel +1 morePCI: pnv_php: Fix surprise plug detection and recovery5.5 Medium
- debian linux, linux kernel +1 morenet: drop UFO packets in udp_rcv_segment()5.5 Medium
- linux, linux kernel +1 moremd: make rdev_addable usable for rcu mode5.5 Medium
- linux, linux kernel +1 morezloop: fix KASAN use-after-free of tag set7.8 High
- linux, linux kernel +1 moremedia: ti: j721e-csi2rx: fix list_del corruption7.8 High
- liferay dxp, portal, digital experience platform +2 moreLiferay Portal User Enumeration Vulnerability via the Create Account Page6.9 Medium
- donknap dpanelDpanel has an arbitrary file read vulnerability4.8 Medium
- ibm qradar siem, qradar incident forensics, qradar security information and event manager +2 moreIBM QRadar SIEM cross-site scripting5.4 Medium
- ibm qradar siem, qradar incident forensics, qradar security information and event manager +2 moreIBM QRadar SIEM privilege escalation7.8 High
- ufo: alien invasion project alien invasionUFO: Alien Invasion <= 2.2.1 IRC Client Buffer Overflow9.3 Critical
- debian linux, linux kernel +1 morevsock: Do not allow binding to VMADDR_PORT_ANY7.8 High
- debian linux, linux kernel +1 morenet/packet: fix a race in packet_set_ring() and packet_notifier()7.8 High
- linux, linux kernel +1 moretls: handle data disappearing from under the TLS ULP7.8 High
- andy moyle church adminWordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability5.3 Medium
- hossni mubarak jobwpWordPress JobWP Plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) Vulnerability4.3 Medium
- ollybach wppizzaWordPress WPPizza Plugin <= 3.19.8 - Broken Access Control Vulnerability4.3 Medium
- Show moreLoading…