28464 matches found
CVE-2023-53570
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: fix integer overflow in nl80211parsembssidelems nl80211parsembssidelems uses a u8 variable numelems to count the number of MBSSID elements in the nested netlink attribute attrs, which can lead to an integer overflo...
CVE-2023-53601
In the Linux kernel, the following vulnerability has been resolved: bonding: do not assume skb macheader is set Drivers must not assume in their ndostartxmit that skbs have their macheader set. skb-data is all what is needed. bonding seems to be one of the last offender as caught by syzbot:...
CVE-2023-53579
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...
CVE-2022-50492
In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix use-after-free on probe deferral The bridge counter was never reset when tearing down the DRM device so that stale pointers to deallocated structures would be accessed on the next tear down e.g. after a second late...
CVE-2025-39939
creationtimestamp| type| source ---|---|--- 2025-10-04 09:49:33+00:00| seen| https://gist.github.com/Darkcrai86/0b5ea1dd40de85fb33f3fccec4011b78...
CVE-2025-39934
In the Linux kernel, the following vulnerability has been resolved: drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ If the interrupt occurs before resource initialization is complete, the interrupt handler/worker may access uninitialized data such as the I2C tcpcclient device,...
CVE-2025-39935
In the Linux kernel, the following vulnerability has been resolved: ASoC: codec: sma1307: Fix memory corruption in sma1307settingloaded The sma1307-set.headersize is how many integers are in the header there are 8 of them but instead of allocating space of 8 integers we allocate 8 bytes. This lea...
CVE-2025-39929
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbdirectrecvio leak in smbdnegotiate error path During tests of another unrelated patch I was able to trigger this error: Objects remaining on kmemcacheshutdown...
EUVD-2025-32406
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...
CVE-2025-9952
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...
CVE-2025-9952 Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...
CVE-2025-9952 Trinity Audio <= 5.20.2 - Reflected Cross-Site Scripting
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...
CVE-2025-9952
CVE-2025-9952 refers to a Reflected Cross-Site Scripting vulnerability in the Trinity Audio – Text to Speech AI audio player plugin for WordPress, affecting versions up to and including 5.20.2. The issue arises from insufficient input sanitization and output escaping in the range-date parameter, ...
CVE-2025-10746
creationtimestamp| type| source ---|---|--- 2025-10-04 03:02:40+00:00| seen| Telegram/mfWNgfW-Td5e4VlL0luik9nel0UOOwsf0EPZiysXDizAFyk...
CVE-2025-9030
creationtimestamp| type| source ---|---|--- 2025-10-04 03:02:32+00:00| seen| Telegram/wx84Y75HflB66YbnuuP9RDP51sxPbAGqhMBCCX041SA1IY...
PT-2025-40625
Name of the Vulnerable Software and Affected Versions Trinity Audio – Text to Speech AI audio player versions prior to 5.20.2 Description The software is susceptible to Reflected Cross-Site Scripting due to inadequate input sanitization and output escaping. This allows unauthenticated attackers t...
CVE-2025-9952: Improper Neutralization of Input During Web Page Generation
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...
CVE-2025-52424
creationtimestamp| type| source ---|---|--- 2025-10-03 21:02:54+00:00| seen| Telegram/DOMYhGPMgXYfkg7mv6Aho08cQYuoCmTOs67daQy2ibaiHCk...