CVE-2024-55651

CVE-2024-55651 pertains to i-Educar (version 2.9) where the application fails to validate and sanitize input in the user type field, causing a stored cross-site scripting (XSS) vulnerability. The root cause is improper input handling of the Tipo de Usuário field, which could allow an attacker to ...

SUSE CVE-2022-49865

In the Linux kernel, the following vulnerability has been resolved: ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network When copying a struct ifaddrlblmsg to the network, ifalreserved remained uninitialized, resulting in a 1-byte infoleak: BUG: KMSAN: kernel-network-infoleak...

SUSE CVE-2022-49922

In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: Fix potential memory leak in nfcmrvli2cncisend nfcmrvli2cncisend will be called by nfcmrvlncisend, and skb should be freed in nfcmrvli2cncisend. However, nfcmrvlncisend will only free skb when i2cmastersend return =...

CVE-2024-45562

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45562 Use After Free in HLOS

Memory corruption during concurrent access to server info object due to unprotected critical field...

CVE-2024-45562

CVE-2024-45562 describes memory corruption during concurrent access to a server info object caused by an unprotected critical field. Sources (NVD, Red Hat, CVE List, CNNVD, VulnEnrichment) confirm the issue and its consistency across feeds. CVSS v3.1 base scores indicate high impact for confident...

CVE-2024-45562 Use After Free in HLOS

Memory corruption during concurrent access to server info object due to unprotected critical field...

kernel: hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field

A vulnerability was found in the Linux kernel's hwmon driver in the w83791d module where the driver performs a read operation, which can result in a NULL pointer dereference. This occurs due to an unnecessary field lm75 that is no longer needed after updates to device handling functions, the driv...

PT-2025-19843 · Qualcomm · Snapdragon +75

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs during concurrent access to a server information object. This corruption is caused by an unprotected critical field, which allows for...

CVE-2025-46720 Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...

U.S. Dept Of Defense: POST XSS - fields[account][lastname] parameter

A cross-site scripting XSS vulnerability was discovered in the fieldsaccountlastname parameter of the POST request. The vulnerability allowed an attacker to inject malicious scripts that could be executed. This could potentially lead to consequences such as cookie theft and session hijacking...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

CVE-2025-45751

CVE-2025-45751 affects SourceCodester Web Based Pharmacy Product Management System 1.0. The issue is a Cross Site Scripting (XSS) vulnerability in add-admin.php via the Fullname field, with root cause an unvalidated Fullname input. Potential impact is client-side script execution in the context o...

SourceCodester Web Based Pharmacy Product Management System 安全漏洞

SourceCodester Web Based Pharmacy Product Management System is an open source web-based pharmaceutical management system from SourceCodester. A security vulnerability exists in SourceCodester Web Based Pharmacy Product Management System version 1.0, which originates from an unvalidated Fullname...

CVE-2025-45751

SourceCodester Web Based Pharmacy Product Management System 1.0 is vulnerable to Cross Site Scripting XSS in add-admin.php via the Fullname text field...

Keystone 安全漏洞

Keystone is a powerful OpenStack open source CMS. used to help you build and scale faster than any other Cms or application framework. A security vulnerability exists in Keystone versions prior to 6.5.0 that stems from the ability to bypass the isFilterable access control in the update and delete...

SUSE CVE-2023-53119

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533outcomplete...

CVE-2023-53119

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533outcomplete...

CVE-2023-53119

In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533outarg properly struct pn533outarg used as a temporary context for outurb is not initialized properly. Its uninitialized 'phy' field can be dereferenced in error cases inside pn533outcomplete...