2223 matches found
CVE-2024-57849 s390/cpum_sf: Handle CPU hotplug remove during sampling
In the Linux kernel, the following vulnerability has been resolved: s390/cpumsf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHPAPPERFS390SFONLINE -- s390pmusfofflinecpu ... CPUHPAPPERFONLINE -- perfeventexitcpu The s390...
CVE-2023-27539
CVE-2023-27539 concerns a denial-of-service vulnerability in the header parsing component of Rack (Ruby Rack). The issue is described as a vulnerability in Rack's header parsing that can affect applications parsing HTTP headers with Rack, leading to potential DoS. The NVD metrics show a MEDIUM-se...
CVE-2023-27539
There is a denial of service vulnerability in the header parsing component of Rack...
CVE-2023-28120
There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...
CVE-2023-28120
There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input...
CVE-2023-23913
CVE-2023-23913 describes a DOM-based cross-site scripting issue in rails-ujs (Rails’ unobtrusive scripting) that can be triggered when pasting malicious HTML content into a contenteditable element if the clipboard HTML includes attributes like data-method, data-remote, or data-disable-with. Affec...
CVE-2023-35685
CVE-2023-35685 describes a logic error in DevmemIntMapPages within the file devicemem_server.c that can cause a physical page use-after-free. This USE-After-FREE condition could enable local privilege escalation in the kernel without requiring additional execution privileges or user interaction. ...
PT-2025-2693 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A request was rejected because it was reserved but not necessary, leading to an unused vulnerability patch. Recommendations: At the moment, there is no information about a newer...
CVE-2022-41995
CVE-2022-41995 concerns the WordPress plugin Gallery Images Ape, affected versions 2.2.8 and earlier. Multiple connected sources describe a Missing Authorization / Broken Access Control vulnerability, caused by incorrectly configured access control security levels in the Gallery Images Ape plugin...
CVE-2022-43476
CVE-2022-43476 relates to the WordPress plugin Subscribe to Category (affected versions:
CVE-2023-48739
CVE-2023-48739 affects the Porto Theme - Functionality WordPress plugin (pre-2.12.1). The issue is a Missing/Broken Access Control vulnerability allowing unauthenticated access due to incorrectly configured authorization. The CVSSv3.1 base score is 5.3 (Medium) with Low availability impact per Pa...
CVE-2023-47692
CVE-2023-47692 is a WordPress Flo Forms plugin vulnerability (affected versions
CVE-2023-47689
CVE-2023-47689 corresponds to a Missing Authorization (Broken Access Control) issue in the WordPress Animator plugin (versions <= 3.0.10) where unauthenticated users can change plugin settings. The vulnerability is documented with CVSS 3.1/6.5 (Medium) and is explicitly mitigated by a fix in v...
CVE-2023-47557
CVE-2023-47557 refers to a Missing Authorization vulnerability in the WordPress plugin Visitors Traffic Real Time Statistics (versions
CVE-2023-47523
CVE-2023-47523 is a Missing Authorization vulnerability in the WordPress plugin Auto Tag Creator (
CVE-2023-47225
CVE-2023-47225 affects the WordPress Short URL plugin (shorten-url) version 1.6.8 and earlier. The issue is a Missing Authorization/broken access control allowing exploitation via multiple AJAX functions, as documented in Patchstack and CVE records. Public details consistently state affected vers...
CVE-2023-47188
CVE-2023-47188 affects the WordPress plugin Simple Job Board (versions
CVE-2023-47183
CVE-2023-47183 refers to a Missing Authorization (Broken Access Control) vulnerability in GiveWP for WordPress. The issue affects GiveWP versions
CVE-2023-47180
CVE-2023-47180 affects the WordPress plugin Finale Lite (XLPlugins Finale Lite) with Missing Authorization, allowing unauthenticated users to delete content due to incorrectly configured access control. Public sources in the Connected Documents confirm the vulnerable range as Finale Lite versions...