Skip to content
OpenAdvisories

Archive

16 August 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.8
    CVE-2025-38502 Public exploit

    bpf: Fix oob access in cgroup local storage

    In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Given two programs each utilizing a cgroup loca…

  • High 7.5
    CVE-2025-38501 Public exploit

    ksmbd: limit repeated connections from clients with the same IP

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: limit repeated connections from clients with the same IP Repeated connections from clients with the same IP address may exhaust the max connections and prevent other normal client conn…

  • Critical 9.8
    CVE-2025-7441 Public exploit EPSS 51%

    StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload

    The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. Th…