Source: msrc

The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command injection.

2025-07-08 CVE-2024-58266

Thor before 1.4.0 can construct an unsafe shell command from library input. NOTE: this is disputed by the Supplier because "the method that was fixed can only be used with argument

2025-07-08 CVE-2025-54314

thunderbolt: Do not double dequeue a configuration request

2025-07-08 CVE-2025-38174

tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer

2025-07-08 CVE-2025-38184

tipc: Fix use-after-free in tipc_conn_close().

2025-07-08 CVE-2025-38464

tls: always refresh the queue when reading sock

2025-07-08 CVE-2025-38471

tracing/osnoise: Fix crash in timerlat_dump_stack()

2025-07-08 CVE-2025-38493

tty: serial: uartlite: register uart driver in init

2025-07-08 CVE-2025-38262

ublk: santizize the arguments from userspace when adding a device

2025-07-08 CVE-2025-38182

Unexpected command execution in untrusted VCS repositories in cmd/go

2025-07-08 CVE-2025-4674

Universal Print Management Service Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-47986

usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume

2025-07-08 CVE-2025-38376

usb: gadget: configfs: Fix OOB read on empty string write

2025-07-08 CVE-2025-38497

usb: gadget: u_serial: Fix race condition in TTY wakeup

2025-07-08 CVE-2025-38448

usb: net: sierra: check for no status endpoint

2025-07-08 CVE-2025-38474

usb: renesas_usbhs: Reorder clock handling and power management in probe

2025-07-08 CVE-2025-38136

usb: typec: altmodes/displayport: do not index invalid pin_assignments

2025-07-08 CVE-2025-38391

usb: typec: displayport: Fix potential deadlock

2025-07-08 CVE-2025-38404

Vim has path traversal issue with zip.vim and special crafted zip archives

2025-07-08 CVE-2025-53906

Vim has path traversial issue with tar.vim and special crafted tar files

2025-07-08 CVE-2025-53905

virtio-net: ensure the received length does not exceed allocated size

2025-07-08 CVE-2025-38375

Visual Studio Code Python Extension Remote Code Execution Vulnerability

2025-07-08 CVE-2025-49714

Visual Studio Elevation of Privilege Vulnerability

2025-07-08 CVE-2025-49739

VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify

2025-07-08 CVE-2025-38102

vsock: Fix transport_{g2h,h2g} TOCTOU

2025-07-08 CVE-2025-38462

vsock: Fix transport_* TOCTOU

2025-07-08 CVE-2025-38461

vsock/vmci: Clear the vmci transport packet properly when initializing it

2025-07-08 CVE-2025-38403

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50077

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50079

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50080

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50081

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50082

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50083

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50085

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50086

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50087

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50092

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50093

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50094

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50096

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50098

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50099

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50100

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50101

Vulnerability in the MySQL Server product of Oracle MySQL

2025-07-08 CVE-2025-50104

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily explo

2025-07-08 CVE-2025-50078

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily

2025-07-08 CVE-2025-50084

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily

2025-07-08 CVE-2025-50091

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily

2025-07-08 CVE-2025-50102

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).

2025-07-08 CVE-2025-53023

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.

2025-07-08 CVE-2025-50097

WebAssembly Micro Runtime's `--addr-pool` option allows all IPv4 addresses when subnet mask is not specified

2025-07-08 CVE-2025-54126

wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850

2025-07-08 CVE-2025-38414

wifi: ath12k: Fix memory leak due to multiple rx_stats allocation

2025-07-08 CVE-2025-38199

wifi: ath12k: fix node corruption in ar->arvifs list

2025-07-08 CVE-2025-38290

wifi: ath6kl: remove WARN on bad firmware input

2025-07-08 CVE-2025-38406

wifi: ath9k_htc: Abort software beacon handling if disabled

2025-07-08 CVE-2025-38157

wifi: carl9170: do not ping device which has failed to load firmware

2025-07-08 CVE-2025-38420

wifi: iwlwifi: don't warn when if there is a FW error

2025-07-08 CVE-2025-38096