2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in infosoftplugin Ord

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Scripts Food St

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saleswonder Team:

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to subvert recons

Software installed and run as a non-privileged user may conduct improper GPU system calls resulting in platform instabil

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outs

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to read data outs

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin before 1.1.23 export settings functional

Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows

A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the

In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topolo

In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk->conv_zones_bitmap Ensure

In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption

In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during samp

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot war

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix corrupt config pages PHY state is

In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Ensure mst_primary pointer is valid in

In the Linux kernel, the following vulnerability has been resolved: power: supply: gpio-charger: Fix set charge current

In the Linux kernel, the following vulnerability has been resolved: net/smc: check return value of sock_recvmsg when dr

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: oa_tc6: fix tx skb race condition be

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix overflow in __rb_map_vma An overf

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a de

In the Linux kernel, the following vulnerability has been resolved: igb: Fix potential invalid memory access in igb_ini

In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in clear_gigantic_page() I

In the Linux kernel, the following vulnerability has been resolved: mm: use aligned address in copy_user_gigantic_page(

In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: Add cancel_work_sync before module re

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix NEXT_BUDDY Adam reports that enabl

In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: unquiesce admin_q before destroy it Ker

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent tailcall infinite loop caused by frepl

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to shrink read extent node in batches We

In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse `hctx` not removed from cpuhp

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition d

HCL MyXalytics is affected by insecure direct object references. It occurs due to missing access control checks, which

HCL MyXalytics is affected by out-of-band resource load (HTTP) vulnerability. An attacker can deploy a web server that

The Coupon X: Discount Pop Up, Promo Code Pop Ups, Announcement Pop Up, WooCommerce Popups plugin for WordPress is vulne

The CF Internal Link Shortcode plugin for WordPress is vulnerable to SQL Injection via the 'post_title' parameter in all

Specially constructed queries cause cross platform scripting leaking administrator tokens

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application acce

The administrator is able to configure an insecure captive portal script

A user with administrator privileges can perform command injection

A user with advanced report application access rights can perform actions for which they are not authorized

Backup uploads to ETM subject to man-in-the-middle interception

MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apc

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_

TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne para

Improper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow attackers to decrypt communica

WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting (XSS) vulnerability was identified in