Lucene search
+L

11604 matches found

RedHat Linux
RedHat Linux
•added 2025/11/11 9:13 a.m.•19 views

kernel: net: af_can: do not leave a dangling sk pointer in can_create()

In the Linux kernel, the following vulnerability has been resolved: net: afcan: do not leave a dangling sk pointer in cancreate On error cancreate frees the allocated sk object, but sockinitdata has already attached it to the provided sock object. This will leave a dangling sk pointer in the sock...

7.8CVSS6.5AI score0.00238EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•16 views

kernel: PCI: Fix NULL dereference in SR-IOV VF creation error path

In the Linux kernel, the following vulnerability has been resolved: PCI: Fix NULL dereference in SR-IOV VF creation error path Clean up when virtfn setup fails to prevent NULL pointer dereference during device removal. The kernel oops below occurred due to incorrect error handling flow when...

5.5CVSS5.5AI score0.00199EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•20 views

kernel: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix use-after-free in dwi3cmaster driver due to race condition In dwi3ccommonprobe, &master-hjwork is bound with dwi3chjwork. And dwi3cmasterirqhandler can call dwi3cmasterirqhandleibis function to start the work. If we...

7.8CVSS7.2AI score0.0023EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•18 views

kernel: workqueue: Put the pwq after detaching the rescuer from the pool

A vulnerability was found in the Linux kernel's work queue subsystem, which manages background task execution. The issue stems from improper handling of the "rescuer" thread during the cleanup of unbound work queues...

7.8CVSS7.2AI score0.00232EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/11/11 8:21 a.m.•20 views

kernel: nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...

5.5CVSS6AI score0.00222EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•19 views

WordPress plugin WP BBCode cross-site scripting vulnerability

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers. WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.5AI score0.00235EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•31 views

SAP Solution Manager code injection vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

9.9CVSS8.7AI score0.00595EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•20 views

WordPress plugin Chart Expert has a security vulnerability.

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Chart Expert, which stems...

6.4CVSS5.5AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•22 views

WordPress plugin WP Count Down Timer has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site...

6.4CVSS5.5AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•26 views

WordPress plugin RandomQuotr has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A cross-site...

5.5CVSS5.5AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•19 views

WordPress Plugin: Featured Image Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

5.5CVSS5.5AI score0.00513EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•19 views

WordPress plugin Squirrels Auto Inventory has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

4.4CVSS5.5AI score0.00205EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•16 views

WordPress plugin WP-Iconics has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

6.4CVSS5.5AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•23 views

WordPress plugin Skip to Timestamp cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.5AI score0.00291EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•17 views

WordPress plugin Slippy Slider has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.4CVSS5.5AI score0.00213EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•19 views

WordPress plugin PayPal donation shortcode cross-site scripting vulnerability

WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers. woocommerce is one of the e-commerce plugins. uninstall is one of the plugins used to completely uninstall WordPress. redirection is one of the...

6.4CVSS5.4AI score0.00193EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•24 views

WordPress plugin Geopost has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.5AI score0.00231EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/11 12:00 a.m.•18 views

WordPress plugin Simple Donate has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

6.4CVSS5.5AI score0.00193EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/11/10 3:31 p.m.•24 views

EUVD-2025-44051

In JetBrains YouTrack before 2025.3.104432 missing user principal cleanup led to reuse of incorrect authorization context...

3.1CVSS6.3AI score0.00005EPSS
SaveExploits0References2
NVD
NVD
•added 2025/11/10 2:15 p.m.•26 views

CVE-2025-64686

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it was fixed before public disclosure and did not affect any released versions...

0.00005EPSS
SaveExploits0
Rows per page
Query Builder