11603 matches found
WordPress Donation SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. WordPress Donation suffers from a SQL injection vulnerability that stems from insufficient cleanup and escaping, no details of the vulnerability are provided at this time...
Linux Distros Unpatched Vulnerability : CVE-2025-68175
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: nxp: imx8-isi: Fix streaming cleanup on release The current implementation unconditionally calls mxcisivideocleanupstreaming in mxcisivideorelease. This...
Linux Distros Unpatched Vulnerability : CVE-2025-68172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: aspeed - fix double free caused by devm The clock obtained via devmclkgetenabled is automatically managed by devres and will be disabled and freed on...
WordPress plugin WP Visitor Statistics has a cross-site scripting vulnerability
...
PT-2025-51588
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.4-00114-g1f61ca5cad76 Description The Linux kernel has a flaw in the media subsystem, specifically within the nxp imx8-isi driver. The current implementation unconditionally calls mxc isi video cleanup...
ConvertX security vulnerabilities
ConvertX is a file format conversion tool from ConvertX, Inc. A security vulnerability exists in ConvertX versions prior to 0.16.0 that stems from the upload function not cleaning up filenames, which could lead to arbitrary files being written and arbitrary code being executed...
WordPress plugin WPZOOM Addons for Elementor has security vulnerabilities
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect call to mxcisivideocleanupstreaming, which could result in the release of a stream queue...
mosquitto:broker_fuzz_password_file: Bad-cast to UT_hash_bucket' (aka 'struct UT_hash_bucket')password_file__cleanup in mosquitto_security_cleanup_default
Project: https://github.com/eclipse/mosquitto.git Detailed Report: https://oss-fuzz.com/testcase?key=4659901361356800 Project: mosquitto Fuzzing Engine: libFuzzer Fuzz Target: brokerfuzzpasswordfile Job Type: libfuzzerubsanmosquitto Platform Id: linux Crash Type: Bad-cast Crash Address:...
WordPress plugin LearnPress – WordPress LMS plugin: Cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...
WordPress plugin: User Registration & Membership – Cross-site Script Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
WordPress Plugin RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login: Cross-site Script Vulnerabilities
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...
Linux mm/kmemleak Heap Buffer Overflow DoS
The vulnerability of the kmemleakdocleanup function in the mm/kmemleak.c component of the Linux operating system is related to excessive iteration. Exploiting this vulnerability allows an attacker to cause a service failure...
fs/jfs Component Confidential Data Access
The vulnerability of the fs/jfs component in Linux operating systems is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
WordPress plugin wpForo Forum SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugi...
PT-2026-43742
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the mfd: arizona component when the wm5102 clear write sequencer function returns an error. The function returns immediately, bypassing the cleanup sequence and...
Improper Session Management
Keycloak is vulnerable to improper session management. The vulnerability is due to reuse of session identifiers and improper cleanup during logout when browser cookies are missing, which allows an attacker to gain unauthorized access to another user’s active session and receive their authenticati...
WordPress plugin Custom Post Type UI cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
WordPress plugin Redux Framework cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...