Lucene search
+L

15512 matches found

SUSE CVE
SUSE CVE
•added 2025/04/05 2:24 a.m.•15 views

SUSE CVE-2025-21990

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits0References5
NVD
NVD
•added 2025/04/04 4:15 p.m.•23 views

CVE-2025-32184

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.5.0...

6.5CVSS0.00399EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/04 3:58 p.m.•76 views

CVE-2025-32184

CVE-2025-32184 is a stored XSS vulnerability in Ultimate Store Kit – Elementor Addons for WordPress. According to the CVE, it affects Ultimate Store Kit Elementor Addons from n/a through 2.4.0. A Wordfence entry also references this CVE as affecting Ultimate Store Kit Elementor Addons

6.5CVSS8.4AI score0.00399EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/04 1:28 p.m.•19 views

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.5.0...

6.5CVSS6.9AI score0.00399EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/04/04 12:00 a.m.•19 views

WordPress plugin Ultimate Store Kit Elementor Addons has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

6.5CVSS7.8AI score0.00399EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/04 12:00 a.m.•10 views

CVE-2025-32184: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.5.0...

6.5CVSS8.6AI score0.00399EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•21 views

PT-2025-14966 · Elementor · Ultimate Store Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: Ultimate Store Kit Elementor Addons versions through 2.4.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

6.5CVSS6.8AI score0.00399EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/04 12:00 a.m.•33 views

PT-2025-16693

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for this issue Description A vulnerability in the Linux kernel has been resolved, which prevented multiple calls in a row to napi disable, causing a hang. The issue occurred when...

5.5CVSS6.2AI score0.00154EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/04/03 9:44 p.m.•18 views

CVE-2025-30807

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martin Nguyen Next-Cart Store to WooCommerce Migration nextcart-woocommerce-migration allows SQL Injection.This issue affects Next-Cart Store to WooCommerce Migration: from n/a through = 3.9.4...

9.3CVSS7.3AI score0.00521EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/04/02 5:40 p.m.•17 views

Malicious code in one-venafi-local-store-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220 The OpenSSF Package Analysis project identified 'one-venafi-local-store-manager' @ 1.0.8 npm as malicious. It is considered malicious because: -...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/04/02 5:40 p.m.•24 views

MAL-2025-3031 Malicious code in one-venafi-local-store-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220 The OpenSSF Package Analysis project identified 'one-venafi-local-store-manager' @ 1.0.8 npm as malicious. It is considered malicious because: -...

7.1AI score
SaveExploits0
osv_debian
osv_debian
•added 2025/04/02 1:15 p.m.•14 views

DEBIAN-CVE-2025-21990

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/04/02 1:15 p.m.•16 views

UBUNTU-CVE-2025-21990

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits0References10
CVE
CVE
•added 2025/04/02 12:53 p.m.•126 views

CVE-2025-21990

This CVE affects the Linux kernel DRM/AMDGPU path. The vulnerability arises when determining GFX12 page table entry (PTE) flags for BOs (backing stores). Specifically, PRT BOs may have no backing store, making bo-&gt;tbo.resource NULL. If this NULL is dereferenced, it can lead to a crash or other...

5.5CVSS5.9AI score0.00189EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/02 12:53 p.m.•8 views

CVE-2025-21990 drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

5.9AI score0.00189EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/04/02 12:53 p.m.•17 views

CVE-2025-21990 drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags PRT BOs may not have any backing store, so bo-tbo.resource will be NULL. Check for that before dereferencing. cherry picked from commit...

5.5CVSS6AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2025/04/02 8:57 a.m.•12 views

SUSE CVE-2025-21943

In the Linux kernel, the following vulnerability has been resolved: gpio: aggregator: protect driver attr handlers against module unload Both newdevicestore and deletedevicestore touch module global resources e.g. gpioaggregatorlock. To prevent race conditions with module unload, a reference need...

4.7CVSS6.1AI score0.0017EPSS
SaveExploits0References15
CNNVD
CNNVD
•added 2025/04/02 12:00 a.m.•16 views

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unchecked BO backing store that could lead to null pointer dereferences...

5.5CVSS6AI score0.00189EPSS
SaveExploits0References5
NVD
NVD
•added 2025/04/01 9:15 p.m.•22 views

CVE-2025-30807

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Martin Nguyen Next-Cart Store to WooCommerce Migration nextcart-woocommerce-migration allows SQL Injection.This issue affects Next-Cart Store to WooCommerce Migration: from n/a through = 3.9.4...

9.3CVSS0.00521EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/01 8:58 p.m.•63 views

CVE-2025-30807

CVE-2025-30807 is a SQL Injection vulnerability in the Next-Cart Store to WooCommerce Migration WordPress plugin (affected: Next-Cart Store to WooCommerce Migration,

9.3CVSS8.4AI score0.00521EPSS
SaveExploits0References1
Rows per page
Query Builder