WordPress WP Featured Entries plugin <= - 1.0 SQL Injection Vulnerability

1.0 SQL Injection Vulnerability discovered by timomangcut in WordPress Plugin WP Featured Entries versions = 1.0...

WordPress plugin WP Featured Entries SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

CVE-2024-10834

eosphoros-ai/db-gpt version 0.6.0 contains a vulnerability in the RAG-knowledge endpoint that allows for arbitrary file write. The issue arises from the ability to pass an absolute path to a call to os.path.join, enabling an attacker to write files to arbitrary locations on the target server. Thi...

CVE-2025-29795

creationtimestamp| type| source ---|---|--- 2025-03-21 20:31:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114202317133635833 2025-03-23 19:49:45+00:00| seen| https://t.me/cvedetector/20911 2025-03-23 20:19:34+00:00| seen|...

PT-2025-35965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An infinite loop may occur in the exFAT file system due to file system corruption if a cluster chain includes a loop and there are no unused entries in the chain. Specifically, this issu...

CVE-2025-1057

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...

CVE-2025-1057 Keylime: keylime registrar dos due to incompatible database entry handling

A flaw was found in Keylime, a remote attestation solution, where strict type checking introduced in version 7.12.0 prevents the registrar from reading database entries created by previous versions, for example, 7.11.0. Specifically, older versions store agent registration data as bytes, whereas...

CVE-2025-2309 HDF5 Type Conversion Logic H5T__bit_copy heap-based overflow

A vulnerability has been found in HDF5 1.14.6 and classified as critical. This vulnerability affects the function H5Tbitcopy of the component Type Conversion Logic. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclos...

Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2

...

pktgen: Avoid out-of-bounds access in get_imix_entries

...

CVE-2025-1219

creationtimestamp| type| source ---|---|--- 2025-03-14 06:25:41+00:00| seen| https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27 2025-03-14 18:23:02+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pjd6i23 2025-03-18 07:25:13+00:00| seen|...

CVE-2025-21860

In the Linux kernel, the following vulnerability has been resolved: mm/zswap: fix inconsistency when zswapstorepage fails Commit b7c0ccdfbafd "mm: zswap: support large folios in zswapstore" skips charging any zswap entries when it failed to zswap the entire folio. However, when some base pages ar...

CVE-2025-21860 mm/zswap: fix inconsistency when zswap_store_page() fails

In the Linux kernel, the following vulnerability has been resolved: mm/zswap: fix inconsistency when zswapstorepage fails Commit b7c0ccdfbafd "mm: zswap: support large folios in zswapstore" skips charging any zswap entries when it failed to zswap the entire folio. However, when some base pages ar...

CVE-2025-27439

creationtimestamp| type| source ---|---|--- 2025-03-11 11:28:47+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xm7z3fs2n 2025-03-11 19:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527753674355 2025-03-11 20:46:22+00:00| seen|...

PT-2025-18394

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the pci endpoint test module. The issue occurs when devm request irq fails with an error in pci endpoint test request ir...

CVE-2024-50394

creationtimestamp| type| source ---|---|--- 2025-03-07 16:35:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6862 2025-03-07 20:48:04+00:00| seen| https://t.me/cvedetector/19848 2025-03-09 03:10:12+00:00| seen| https://bsky.app/profile/dinosn.bsky.social/post/3ljw2sqno7k27 2025-03-09...

Linux Distros Unpatched Vulnerability : CVE-2024-56698

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: dwc3: gadget: Fix looping of queued SG entries The dwc3request-numqueuedsgs is decremented on completion. If a partially completed request is handled, then...

Linux Distros Unpatched Vulnerability : CVE-2025-21777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring...

Linux Distros Unpatched Vulnerability : CVE-2024-42289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: qla2xxx: During vport delete send async logout explicitly During vport delete, it is observed that during unload we hit a crash because of stale entries i...

Linux Distros Unpatched Vulnerability : CVE-2017-14319

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table...