Lucene search
+L

23856 matches found

OSV
OSV
added 2025/12/24 1:06 p.m.8 views

CVE-2023-54104 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fslupm: Fix an off-by one test in funexecop 'op-cs' is copied in 'fun-mchipnumber' which is used to access the 'mchipoffsets' and the 'rnbgpio' arrays. These arrays have NANDMAXCHIPS elements, so the index must be...

7.8CVSS6.4AI score
SaveExploits0References8
OSV
OSV
added 2025/12/24 1:05 p.m.7 views

CVE-2022-50753 f2fs: fix to do sanity check on summary info

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on summary info As Wenqing Liu reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=216456 BUG: KASAN: use-after-free in recoverdata+0x63ae/0x6ae0 f2fs Read of size 4 at addr...

7.8CVSS6.4AI score
SaveExploits0References9
CVE
CVE
added 2025/12/24 1:05 p.m.29 views

CVE-2022-50753

CVE-2022-50753 = Linux kernel f2fs: fix to sanity check on summary info. Root cause: SSA table corruption (ofs_in_node > ADDRS_PER_PAGE) caused out-of-range reads during recovery; patch adds sanity checks in recovery and GC flows to prevent use-after-free in recover_data paths. Affected code: ...

7.8CVSS6.2AI score0.002EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/12/24 12:00 a.m.8 views

PT-2025-53119

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc4 Description The Linux kernel contains a flaw within the f2fs file system related to sanity checks on summary information. This issue can lead to a use-after-free condition, specifically triggered by...

6.5AI score0.002EPSS
SaveExploits0References8
OSV
OSV
added 2025/12/19 2:43 p.m.15 views

USN-7922-3 linux-oracle-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - Network drivers; - Pin controllers...

8.6CVSS6.4AI score0.0074EPSS
SaveExploits0References16
OSV
OSV
added 2025/12/19 2:41 p.m.13 views

USN-7928-4 linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Media drivers; - Network drivers; - AFS file system; - F2FS file system; - Tracing...

8.6CVSS6.7AI score0.0046EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2025/12/19 7:33 a.m.10 views

CVE-2025-58888

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

8.1CVSS7.1AI score0.00523EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.25 views

PT-2025-52608

CVE-2025-67046 - Adobe Flash Unvalidated Redirects CVE ID : CVE-2025-67046 Published : Dec. 19, 2025, 4:15 p.m. | 2 hours, 8 minutes ago Description : Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-67037. Reason: This record is a reservation duplicate of CVE-2025-67037. Notes:...

6.8AI score0.00302EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/19 12:00 a.m.15 views

PT-2025-52604

Content removed...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/12/18 11:36 p.m.9 views

CVE-2023-53912

USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\USB Flash Drives Control\usbcs.exe' to inject malicious...

8.5CVSS7.3AI score0.00139EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.14 views

EUVD-2025-204184

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

8.2CVSS6.6AI score0.00523EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/18 8:15 a.m.7 views

CVE-2025-58888

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

8.2CVSS5.8AI score0.00523EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:15 a.m.19 views

CVE-2025-58888

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

8.1CVSS0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:21 a.m.5 views

CVE-2025-58888 WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

8.1CVSS6.7AI score0.00523EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.26 views

CVE-2025-58888

CVE-2025-58888 concerns WordPress The Flash theme (

8.1CVSS6.7AI score0.00523EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/12/18 7:21 a.m.40 views

CVE-2025-58888 WordPress The Flash theme <= 1.15 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Flash theflash allows PHP Local File Inclusion.This issue affects The Flash: from n/a through = 1.15...

8.1CVSS0.00523EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/18 12:34 a.m.7 views

EUVD-2023-60218

USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\USB Flash Drives Control\usbcs.exe' to inject malicious...

8.5CVSS6.8AI score0.00139EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.12 views

WordPress plugin The Flash 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability exists in...

8.1CVSS6.6AI score0.00523EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.10 views

PT-2025-52062

Name of the Vulnerable Software and Affected Versions AncoraThemes The Flash versions through 1.15 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

8.2CVSS6.7AI score0.00523EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/17 11:15 p.m.9 views

CVE-2023-53912

USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\USB Flash Drives Control\usbcs.exe' to inject malicious...

8.5CVSS0.00139EPSS
SaveExploits0References3
Rows per page
Query Builder