UBUNTU-CVE-2023-52985

In the Linux kernel, the following vulnerability has been resolved: arm64: dts: imx8mm-verdin: Do not power down eth-phy Currently if suspending using either freeze or memory state, the fec driver tries to power down the phy which leads to crash of the kernel and non-responsible kernel with the...

UBUNTU-CVE-2023-53020

In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tptunnelregister The code in l2tptunnelregister is racy in several ways: 1. It modifies the tunnel socket after publishing it. 2. It calls setupudptunnelsock on an existing socket without...

USN-7381-1: Linux kernel (Low Latency) vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

Netty DoS

The vulnerability of the Netty network programming framework is related to insufficient validation of the data entered by the user in the SslHandler when using the own SSLEngine. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a race condition in l2tp tunnel registration...

CVE-2025-30532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.This issue affects Weather Layer: from n/a through = 4.2.1...

AquilaCMS 路径遍历漏洞

AquilaCMS is a complete multipurpose open source CMS from the AquilaCMS team. A security vulnerability exists in AquilaCMS that stems from the OSAL module being susceptible to path traversal attacks...

PT-2025-12827

Name of the Vulnerable Software and Affected Versions NASA cFS Core Flight System Aquila affected versions not specified Description The issue concerns path traversal in the OSAL module, which allows the override of any arbitrary file on the system. Recommendations At the moment, there is no...

PT-2025-16743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the l3mdev l3 rcv function. This issue occurs when deleting an l3s ipvlan, which can cause a nul...

CVE-2025-30532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.This issue affects Weather Layer: from n/a through = 4.2.1...

CVE-2025-30532 WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer allows Stored XSS. This issue affects Weather Layer: from n/a through 4.2.1...

CVE-2025-30532 WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.This issue affects Weather Layer: from n/a through = 4.2.1...

CVE-2025-30532

CVE-2025-30532 describes a Stored XSS in Weather Layer (WordPress plugin). In Weather Layer: from n/a through 4.2.1, the issue stems from improper input neutralization during web page generation, enabling stored XSS. The provided metrics classify the exploit as Cross-site Scripting with Low/Moder...

WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Weather Layer versions = 4.2.1...

CVE-2025-30532: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.This issue affects Weather Layer: from n/a through = 4.2.1...

WordPress plugin Weather Layer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

PT-2025-12585

Name of the Vulnerable Software and Affected Versions MorganF Weather Layer versions n/a through 4.2.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inje...

Mozilla Firefox ALPN Redirect

The vulnerability of the Application-Layer Protocol Negotiation ALPN component in Mozilla Firefox, Firefox ESR, and Thunderbird email clients, including Thunderbird ESR, is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirec...

SAP Business One Service Layer Privilege Escalation

The vulnerability of the Service Layer component of the SAP Business One resource management system is related to improper session management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain access to read, modify, and/or add data...

Linux kernel PHY driver Heap Buffer Overflow DoS

The vulnerability of the tusb1210removechargerdetect function in the drivers/phy/ti/phy-tusb1210.c file of the Linux kernel’s PHY driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...