WordPress plugin Events Calendar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exis...

DRUPAL-CONTRIB-2025-059

The Events Log Track module enables you to log specific events on a Drupal site. The module doesn't sufficiently mitigate resource consumption for certain requests which allows a Denial of Service attack...

Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059

The Events Log Track module enables you to log specific events on a Drupal site. The module doesn't sufficiently mitigate resource consumption for certain requests which allows a Denial of Service attack...

Drupal Events Log Track module < 3.1.11,4.0.0-4.0.1 - Unauthenticated Denial of Service Attack vulnerability

Unauthenticated Denial of Service Attack vulnerability discovered by Scott Phillips scottatdrake in WordPress Module Events Log Track versions 3.1.11,4.0.0-4.0.1...

CVE-2025-31232

creationtimestamp| type| source ---|---|--- 2025-05-13 19:31:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16205 2026-04-02 22:17:20+00:00| seen| Telegram/uS-LGheIl2lIO3kT7MFmdoi3VL-1CYgYB6CRF5I8i3PT0...

xorg: xwayland: Use-after-free in PlayReleasedEvents()

A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free...

kernel: tracing: Free buffers when a used dynamic event is removed

In the Linux kernel, the following vulnerability has been resolved: tracing: Free buffers when a used dynamic event is removed After 65536 dynamic events have been added and removed, the "type" field of the event then uses the first type number that is available not currently used by other events...

CVE-2025-24258

creationtimestamp| type| source ---|---|--- 2025-05-12 22:29:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16066 2026-04-02 22:16:28+00:00| seen| Telegram/HtlWPkPiQvvGfGgGspf86pXjCdMEq1pNHvPDVw1Ntc41Co...

CVE-2022-42117

creationtimestamp| type| source ---|---|--- 2025-05-12 18:29:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15976 2025-05-12 18:31:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15990 2025-05-12 18:37:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16006...

SUSE CVE-2025-37845

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 "tracing: tprobe-events: Fix leakage of module refcount" moved trymoduleget from findtracepointmodulecb to findtracepoint caller, but that introduced a...

SUSE CVE-2025-37878

In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix WARNON!ctx in freeevent for partial init Move the getctxchildctx call and the childevent-ctx assignment to occur immediately after the child event is allocated. Ensure that childevent-ctx is non-NULL before any...

RHSA-2025:4508

creationtimestamp| type| source ---|---|--- 2025-05-09 20:26:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15833 2025-05-09 20:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15835...

RHSA-2025:4440

creationtimestamp| type| source ---|---|--- 2025-05-09 20:26:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15833 2025-05-09 20:26:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/15835...

CVE-2025-47519

Cross-Site Request Forgery CSRF vulnerability in Scott Paterson Easy PayPal Events easy-paypal-events-tickets allows Cross Site Request Forgery.This issue affects Easy PayPal Events: from n/a through = 1.2.2...

CVE-2025-47531

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Xylus Themes XT Event Widget for Social Events xt-facebook-events allows PHP Local File Inclusion.This issue affects XT Event Widget for Social Events: from n/a through = 1.1.7...

CVE-2025-47510

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows PHP Local File Inclusion.This issue affects Display Eventbrite Events: from n/a through 6.3...

AZL-70162 CVE-2025-37884 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix deadlock between rcutaskstrace and eventmutex. Fix the following deadlock: CPU A freeevent perfkprobedestroy mutexlock&eventmutex perftraceeventunreg synchronizercutaskstrace There are several paths where freeevent grabs...

DEBIAN-CVE-2025-37882

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...

CVE-2025-37845

In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 "tracing: tprobe-events: Fix leakage of module refcount" moved trymoduleget from findtracepointmodulecb to findtracepoint caller, but that introduced a...

UBUNTU-CVE-2025-37882

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix isochronous Ring Underrun/Overrun event handling The TRB pointer of these events points at enqueue at the time of error occurrence on xHCI 1.1+ HCs or it's NULL on older ones. By the time we are handling the event,...