Lucene search
K

11455 matches found

RedhatCVE
RedhatCVE
added 2025/12/31 2:48 p.m.3 views

CVE-2023-54274

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Add a check for valid 'madagent' pointer When unregistering MAD agent, srpt module has a non-null check for 'madagent' pointer before invoking ibunregistermadagent. This check can pass if 'madagent' variable holds an...

5.8CVSS5AI score0.00176EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/31 2:18 p.m.3 views

CVE-2025-62108 WordPress Add Custom Codes plugin <= 4.80 - Broken Access Control vulnerability

Missing Authorization vulnerability in SaifuMak Add Custom Codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through 4.80...

5.4CVSS6.6AI score0.0017EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 2:18 p.m.3 views

EUVD-2025-205948

Missing Authorization vulnerability in SaifuMak Add Custom Codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Custom Codes: from n/a through 4.80...

5.4CVSS6.5AI score0.0017EPSS
Exploits0References2
CVE
CVE
added 2025/12/31 2:18 p.m.10 views

CVE-2025-62108

Technical details for CVE-2025-62108 are not provided in the connected documents; please monitor for updates.

5.4CVSS5.9AI score0.0017EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/31 1:58 p.m.3 views

CVE-2023-54262

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't clone flow post action attributes second time The code already clones post action attributes in mlx5ecloneflowattrforpostact. Creating another copy in mlx5etcpostactadd is a erroneous leftover from original...

5.8CVSS5.6AI score0.00168EPSS
Exploits0References4
EUVD
EUVD
added 2025/12/31 1:43 p.m.3 views

EUVD-2025-205960

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ViitorCloud Technologies Pvt Ltd Add Featured Image Custom Link allows DOM-Based XSS.This issue affects Add Featured Image Custom Link: from n/a through 2.0.0...

5.9CVSS5.9AI score0.00176EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/31 1:18 p.m.5 views

EUVD-2025-205961

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SaifuMak Add Custom Codes allows Stored XSS.This issue affects Add Custom Codes: from n/a through 4.80...

5.9CVSS5.5AI score0.00176EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/31 1:18 p.m.24 views

CVE-2025-62149 WordPress Add Custom Codes plugin <= 4.80 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Stored XSS.This issue affects Add Custom Codes: from n/a through = 4.80...

5.9CVSS0.00176EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 1:18 p.m.4 views

CVE-2025-62149 WordPress Add Custom Codes plugin <= 4.80 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SaifuMak Add Custom Codes allows Stored XSS.This issue affects Add Custom Codes: from n/a through 4.80...

5.9CVSS5.6AI score0.00176EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 1:18 p.m.10 views

CVE-2025-62149

CVE-2025-62149 concerns the WordPress plugin “Add Custom Codes” (affected: versions up to 4.80) with an authenticated Stored XSS vulnerability. The Wordfence entry labels it as an issue exploitable by an authenticated user with the Author role, via input during web page generation. The provided d...

5.9CVSS5.9AI score0.00176EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 1:17 p.m.7 views

WordPress Add Custom Codes plugin <= 4.80 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Certus Cybersecurity in WordPress Plugin Add Custom Codes versions = 4.80...

5.9CVSS5.9AI score0.00176EPSS
Exploits0Affected Software1
SUSE CVE
SUSE CVE
added 2025/12/31 12:31 a.m.3 views

SUSE CVE-2022-50858

In the Linux kernel, the following vulnerability has been resolved: mmc: alcor: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

4.4CVSS6.5AI score0.00206EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2025/12/31 12:30 a.m.2 views

SUSE CVE-2022-50886

In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be leaked and it will lead a kernel crash because of deleting not added...

5.5CVSS6.5AI score0.00195EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2025/12/31 12:29 a.m.2 views

SUSE CVE-2023-54164

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix isoconn related locking and validity issues sk-skstate indicates whether isopisk-conn is valid. Operations that check/update skstate and access conn should hold locksock, otherwise they can race. The order of...

5.5CVSS6.3AI score0.00166EPSS
Exploits0References19
SUSE CVE
SUSE CVE
added 2025/12/31 12:25 a.m.1 views

SUSE CVE-2023-54321

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in deviceadd I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds248...

5.5CVSS6.7AI score0.00129EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.4 views

WordPress plugin Signature Add-On for Gravity Forms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A security vulnerabilit...

4.3CVSS6.4AI score0.00198EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.3 views

WordPress plugin Add Custom Codes 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS5.9AI score0.00176EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.3 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993246 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/drv: Fix potential memory leak in drmdevinit drmdevinit will add drmdevinitrelease as a...

5.5CVSS6AI score0.00176EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-50846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: via-sdmmc: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, it will lead two issues: 1. The memory that...

6AI score0.00239EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.2 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993195)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993195 advisory. In the Linux kernel, the following vulnerability has been resolved: rbd: avoid use-after-free in dorbdadd when rbddevcreate fails If getting an ID or setting up a wo...

7.8CVSS5.9AI score0.0015EPSS
Exploits0References4
Rows per page
Query Builder