Lucene search
+L

4924 matches found

SUSE CVE
SUSE CVE
added 2025/12/25 12:23 a.m.5 views

SUSE CVE-2025-68748

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthorfwunplug will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this...

6.4CVSS6.4AI score0.00124EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/12/24 3:30 p.m.7 views

EUVD-2025-205214

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthorfwunplug will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this...

5.8AI score0.00124EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/12/24 3:30 p.m.7 views

EUVD-2025-205265

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through = 3.2.2...

9.8CVSS7.1AI score0.0029EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/12/24 3:30 p.m.6 views

EUVD-2023-60325

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidpsessionthread There is a potential race condition in hidpsessionthread that may lead to use-after-free. For instance, the timer is active while hidpdeltimer is called in hidpsessionthread. Aft...

5.8AI score0.00192EPSS
SaveExploits0References9
NVD
NVD
added 2025/12/24 1:16 p.m.8 views

CVE-2025-68570

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through = 3.2.2...

7.6CVSS0.0029EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/12/24 1:16 p.m.8 views

CVE-2023-54120

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Fix race condition in hidpsessionthread There is a potential race condition in hidpsessionthread that may lead to use-after-free. For instance, the timer is active while hidpdeltimer is called in hidpsessionthread. Aft...

6.2AI score0.00192EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
added 2025/12/24 1:16 p.m.4 views

CVE-2025-68748

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthorfwunplug will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this...

6.5AI score0.00124EPSS
SaveExploits0References12
OSV
OSV
added 2025/12/24 1:16 p.m.5 views

UBUNTU-CVE-2025-68748

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthorfwunplug will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this...

7.8CVSS5.7AI score0.00124EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2025/12/24 1:10 p.m.4 views

CVE-2025-68570 WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through = 3.2.2...

7.6CVSS7.3AI score0.0029EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 1:10 p.m.32 views

CVE-2025-68570 WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through = 3.2.2...

7.6CVSS0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 1:10 p.m.15 views

CVE-2025-68570

Public technical details for CVE-2025-68570 are not provided in the supplied documents. No confirmed affected version, root cause, impact, or fix is disclosed here. Monitor vendor advisories and vulnerability databases for updates.

7.6CVSS7.3AI score0.0029EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/24 1:6 p.m.15 views

CVE-2023-54120

CVE-2023-54120 concerns a race condition in the Linux kernel Bluetooth HIDP subsystem, where the hidp_session_thread may delay timer deletion leading to a use-after-free if the session is freed during timer expiry. The described vulnerability manifests as a potential kernel panic when hidp_idle_t...

5.9AI score0.00192EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2025/12/24 12:9 p.m.35 views

CVE-2025-68748 drm/panthor: Fix UAF race between device unplug and FW event processing

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug and FW event processing The function panthorfwunplug will free the FW memory sections. The problem is that there could still be pending FW events which are yet not handled at this...

7.8CVSS0.00124EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/24 12:9 p.m.25 views

CVE-2025-68748

CVE-2025-68748 : In the Linux kernel, a use-after-free race exists in the Panthor DRM driver between unplugging a device and FW event processing. The panthor_fw_unplug() routine frees FW memory sections, but there may be pending FW events not yet processed, causing process_fw_events_work() to acc...

7.8CVSS6AI score0.00124EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.14 views

PT-2025-52925

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition existed between the host1x syncpt alloc and host1x syncpt put functions. The issue was addressed by utilizing kref put mutex instead of kref put combined with manual mut...

6.1AI score0.00168EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.5 views

WordPress plugin Captivate Sync 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A security...

7.6CVSS7.6AI score0.0029EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.7 views

PT-2025-53258

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.This issue affects Captivate Sync: from n/a through = 3.2.2...

9.8CVSS7.7AI score0.0029EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/24 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-68748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Fix UAF race between device unplug and FW event processing The function panthorfwunplug will free the FW memory sections. The problem is that there...

7.8CVSS7.4AI score0.00124EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/12/21 3:30 a.m.11 views

WordPress Captivate Sync plugin <= 3.2.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by w41bu1 in WordPress Plugin Captivate Sync versions = 3.2.2...

9.8CVSS8.1AI score0.0029EPSS
SaveExploits0Affected Software1
UbuntuCve
UbuntuCve
added 2025/12/18 3:16 p.m.4 views

CVE-2025-68324

In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'immtq' is initialized in immattach and scheduled via immqueuecommand for processing SCSI commands. When the IMM parallel port SCSI host...

6.1AI score0.00162EPSS
SaveExploits0References13
Rows per page
Query Builder