CVE-2024-39441: Undefined Security Weakness

In wifi display, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-49135: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix memory leak why Resource release is needed on the error handling path to prevent memory leak. how Fix this by adding kfree on the error handling path...

AZL-57298 CVE-2025-26599 affecting package xorg-x11-server 1.20.10-6

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...

UBUNTU-CVE-2025-26597

A buffer overflow flaw was found in X.Org and Xwayland. If XkbChangeTypesOfKey is called with a 0 group, it will resize the key symbols table to 0 but leave the key actions unchanged. If the same function is later called with a non-zero value of groups, this will cause a buffer overflow because t...

WordPress WooCommerce Display Products by Tags plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin WooCommerce Display Products by Tags versions = 1.0.0...

CVE-2025-27331

CVE-2025-27331 corresponds to a DOM-Based XSS in the WordPress plugin WooCommerce Display Products by Tags (versions

PT-2025-7752 · WordPress · Woocommerce Display Products By Tags

Name of the Vulnerable Software and Affected Versions: WooCommerce Display Products by Tags versions 1.0.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site Scripting XSS vulnerability. Specifically, it is a...

CVE-2025-27331: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sébastien Dumont WooCommerce Display Products by Tags woocommerce-display-products-by-tags allows DOM-Based XSS.This issue affects WooCommerce Display Products by Tags: from n/a through = 1.0.0...

Linux DRM AMD Display Kernel DoS

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a hacker to cause a service failure...

Linux pfcp_newlink() DoS

The vulnerability of the pfcpnewlink function in Linux operating systems is related to incorrect display of the list of network devices due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

SUSE CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

DEBIAN-CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

ALPINE-CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

UBUNTU-CVE-2025-26603

Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the :redir ex command to register, variables and files. It also allows to show the contents of registers using the :registers or :display ex command. When redirecting the output of...

CVE-2024-13535

The Actionwear products sync plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.3.0. This is due the composer-setup.php file being publicly accessible with 'displayerrors' set to true. This makes it possible for unauthenticated attackers to retrieve...

Linux DRM AMD Display Kernel DoS

The vulnerability of components such as DRM, AMD, and display kernels in the Linux operating system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2025-6562 · WordPress · Actionwear Products Sync Plugin

Name of the Vulnerable Software and Affected Versions: Actionwear products sync plugin for WordPress versions up to, and including, 2.3.0 Description: The issue is due to the composer-setup.php file being publicly accessible with display errors set to true, allowing unauthenticated attackers to...

Linux DRM AMD Display Kernel DoS

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to zero-division errors. Exploiting this vulnerability can allow a perpetrator to cause service failures...

Linux DRM AMD Display Kernel DoS

The vulnerability of the DRM/amd/display components in the Linux operating system is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux DRM AMD Display Kernel DoS

The vulnerability of DRM/AMD/display cores in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow a hacker to cause service failures...