14254 matches found
CVE-2025-38383 mm/vmalloc: fix data race in show_numa_info()
In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: fix data race in shownumainfo The following data-race was found in shownumainfo: ================================================================== BUG: KCSAN: data-race in vmallocinfoshow / vmallocinfoshow read to...
PT-2025-30783
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A data race was identified in the show numa info function within the vmalloc.c file. The issue stems from concurrent read and write access to m-private by multiple CPUs, leading to a...
WordPress bSecure plugin elevation of privilege vulnerability
WordPress bSecure plugin is a plugin used to enhance the security of the website, mainly for the payment page of GiveWP to provide security features. An elevation of privilege vulnerability exists in the WordPress bSecure plugin, which stems from a lack of authorization in the orderinfo REST...
PT-2025-30832
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to framebuffer relocation behind PCI bridges. The issue arises because framebuffer memory ranges in screen info are not updated when PCI host...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a data contention in shownumainfo...
CVE-2025-8114
creationtimestamp| type| source ---|---|--- 2025-07-24 14:32:16+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114908694803642637 2025-09-19 18:51:31+00:00| seen| https://gist.github.com/EbonJaeger/2ba8ad95fbe2fa2ac2e44b74f6abfe47 2025-11-03 06:19:06+00:00| seen|...
CVE-2025-51089
Tenda AC8V4 V16.03.34.06 was discovered to contain heap overflow at /goform/GetParentControlInfo.The manipulation of the argument mac leads to heap-based buffer overflow...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the markdown field in the info tab page. An attacker can execute arbitrary JavaScript code in the context of a user's browser by injecting malicious content. Details Cross-site scripting or XSS is a code...
CVE-2025-32019
Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed ...
CVE-2025-32019: Improper Neutralization of Input During Web Page Generation
Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Versions 2.11.2 and below, as well as versions 2.12.0-rc1 and 2.13.0-rc1, contain a vulnerability where the markdown field in the info tab page can be exploited to inject XSS code. This is fixed ...
WordPress plugin bSecure has a security vulnerability
WordPress bSecure plugin is a plugin used to enhance the security of the website, mainly for the payment page of GiveWP to provide security features. An elevation of privilege vulnerability exists in the WordPress bSecure plugin, which stems from a lack of authorization in the orderinfo REST...
GHSA-FJXV-7RQG-78G4
creationtimestamp| type| source ---|---|--- 2025-07-18 16:45:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114875246100963364 2025-08-27 10:21:25+00:00| seen| https://gist.github.com/rz1989s/3787e596e76e4bb395efb5509a1c1804 2026-09-20 17:02:58+00:00| seen|...
CVE-2025-52933
creationtimestamp| type| source ---|---|--- 2025-07-17 14:45:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lu66c3ehqg2j...
Oracle Linux 8 : kernel (ELSA-2025-11298)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-11298 advisory. - misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram CKI Backport Bot RHEL-100343 CVE-2022-49788 - media: uvcvideo: Remove dangling pointers...
kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
In the Linux kernel, the following vulnerability has been resolved: misc/vmwvmci: fix an infoleak in vmcihostdoreceivedatagram struct vmcieventqp allocated by qpnotifypeer contains padding, which may carry uninitialized data to the userspace, as observed by KMSAN: BUG: KMSAN: kernel-infoleak in...
CVE-2025-54013: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in info@welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through = 2.11.16...
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: cifs: potential buffer overflow in handling symlinks CVE-2022-49058 kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: media: uvcvideo: Fix double free in error path...
CVE-2025-6974
creationtimestamp| type| source ---|---|--- 2025-07-15 15:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857919005997369 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-618/...
LB-LINK’s various products have access control vulnerability issues
LB-LINK BL-AC1900 and others are products of China Bilink LB-LINK.LB-LINK BL-AC1900 is a wireless router.LB-LINK BL-AC3600 is a dual-band Gigabit wireless router that supports both 2.4GHz and 5GHz bands and is suitable for home and small office networks.LB-LINK AC2100AZ3 is a router. An access...