The vulnerability of the pci_slot_release() function in the drivers/pci/slot.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcislotrelease function in the drivers/pci/slot.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to data type conversion errors, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the EFI loader in microprogrammed software for SIMATIC IPC devices, SIMATIC PC tablets, and SIMATIC Field PG notebooks allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the EFI loader in microprogrammed software for SIMATIC IPC devices, SIMATIC PC tablets, and SIMATIC Field PG notebooks is related to the breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

Vulnerability of the pps_gpio_probe() function in the drivers/pps/clients/pps-gpio.c module – This driver for Linux kernel’s PPS client support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Vulnerability of the tcmu_try_get_block_page() function in the drivers/target/target_core_user.c module – The TCM driver for the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the tcmutrygetblockpage function in the drivers/target/targetcoreuser.c module – The TCM driver for the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the tls_user_config() function in the include/net/tls.h module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tlsuserconfig function in the include/net/tls.h module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Vulnerability of the fsl_mc_bus_remove() function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the fslmcbusremove function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in Linux kernel is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the SAP NetWeaver software integration platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver software integration platform is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the __mptcp_close_ssk() function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2025-32650

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32215

Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Stored XSS.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32640

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Elementor Ally pojo-accessibility allows Stored XSS.This issue affects Ally: from n/a through = 3.1.0...

CVE-2025-32650

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32650 WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite online-accessibility allows SQL Injection.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32650 WordPress Accessibility Suite by Ability, Inc plugin <= 4.18 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ability, Inc Accessibility Suite by Online ADA allows SQL Injection. This issue affects Accessibility Suite by Online ADA: from n/a through 4.18...

CVE-2025-32650

CVE-2025-32650: Authenticated SQL Injection in Accessibility Suite by Online ADA (WordPress plugin) affecting

WordPress plugin Accessibility Suite by Online ADA SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2025-32215

Unrestricted Upload of File with Dangerous Type vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Stored XSS.This issue affects Accessibility Suite: from n/a through = 4.18...

CVE-2025-32215

CVE-2025-32215 affects Accessibility Suite by Ability, Inc (WordPress plugin) up to version 4.18. The issue is an Unrestricted Upload of File with Dangerous Type that enables Stored XSS when an authenticated user uploads a file with a dangerous type. Public details in the connected Wordfence entr...