WordPress plugin Interactive US Map 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

FASTRPC_ATTR_KEEP_MAP Use-After-Free

A FASTRPCATTRKEEPMAP logic bug allows fastrpcinternalmunmapfd to concurrently free in-use mappings leading to a use-after-free condition...

Hash Collision Attack

io.netty.incubator, netty-incubator-codec-quic is vulnerable to Hash Collision Attack. The vulnerability is due to a hash collision in the hash map used to manage connections, which allows remote attackers to perform a Hash DoS attack by initiating connections with colliding Source Connection IDs...

CVE-2025-21437

Memory corruption while processing memory map or unmap IOCTL operations simultaneously...

CVE-2024-45543

Memory corruption while accessing MSM channel map and mixer functions...

CVE-2024-45543 Out-of-bounds Write in Audio

Memory corruption while accessing MSM channel map and mixer functions...

CVE-2024-45543 Out-of-bounds Write in Audio

Memory corruption while accessing MSM channel map and mixer functions...

PT-2025-15192 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when invoking an IOCTL map buffer request from userspace. This can potentially lead to unintended system behavior. Recommendations: At the...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to concurrent writes to a map by logger.go. An attacker can induce a read-write conflict and cause repeated restarts and then a panic by writing to multiple logs simultaneously. Remediation There is no fixed version f...

CVE-2025-31890

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mashi Simple Map No Api simple-map-no-api allows Stored XSS.This issue affects Simple Map No Api: from n/a through = 1.9...

Vulnerability of the btrfs_scan_root() function (fs/btrfs/extent_map.c) in the Linux operating system, which allows a hacker to increase their privileges

The vulnerability of the btrfsscanroot function fs/btrfs/extentmap.c in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

smallrye-fault-tolerance: SmallRye Fault Tolerance

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service DoS issue...

smallrye-fault-tolerance: SmallRye Fault Tolerance

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service DoS issue...

CVE-2025-31613

Cross-Site Request Forgery CSRF vulnerability in Aboobacker. AB Google Map Travel ab-google-map-travel allows Cross Site Request Forgery.This issue affects AB Google Map Travel : from n/a through = 4.6...

smallrye-fault-tolerance: SmallRye Fault Tolerance

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory OOM issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service DoS issue...

UBUNTU-CVE-2025-21933

In the Linux kernel, the following vulnerability has been resolved: arm: pgtable: fix NULL pointer dereference issue When updatemmucacherange is called by updatemmucache, the vmf parameter is NULL, which will cause a NULL pointer dereference issue in adjustpte: Unable to handle kernel NULL pointe...

CVE-2025-31890

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mashi Simple Map No Api simple-map-no-api allows Stored XSS.This issue affects Simple Map No Api: from n/a through = 1.9...

CVE-2025-31890 WordPress Simple Map No Api plugin <= 1.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mashi Simple Map No Api simple-map-no-api allows Stored XSS.This issue affects Simple Map No Api: from n/a through = 1.9...

CVE-2025-31890

CVE-2025-31890 affects the WordPress plugin Simple Map No Api. The connected Wordfence vulnerability listing indicates an Authenticated (Contributor+) Stored Cross-Site Scripting issue in Simple Map No Api, with the affected range up to version 1.9. The root cause is improper neutralization of in...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the debugInfo function in the cache.go file. An attacker can trigger a fatal error in the cache system by exploiting a race condition vulnerability that occurs when concurrent map iteration and map write...