PT-2025-1584 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential buffer overflow issue was reported that could allow a local attacker to...

CVE-2024-10254: Heap-based Buffer Overflow

A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

Security vulnerabilities in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store

Lenovo App Store and others are products of Lenovo, a Chinese company.Lenovo App Store is a desktop application.Lenovo Browser is a browser.Lenovo PC Manager is a PC management software. A security vulnerability exists in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store that stems from the...

CVE-2025-22314

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup food-store allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through = 1.5.4...

CVE-2025-22314 WordPress Food Store plugin <= 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through 1.5.1...

CVE-2025-22314

CVE-2025-22314 is a real, publicly documented Reflected XSS in the WP Scripts Food Store – Online Food Delivery & Pickup WordPress plugin. Affected: Food Store – Online Food Delivery & Pickup, listed as

CVE-2025-22314 WordPress Food Store plugin <= 1.5.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup food-store allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through = 1.5.4...

CVE-2025-22314: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Scripts Food Store – Online Food Delivery & Pickup food-store allows Reflected XSS.This issue affects Food Store – Online Food Delivery & Pickup: from n/a through = 1.5.4...

PT-2025-9008

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue has been identified in the Linux kernel. The problem occurs when the sysfs -store function is called while a queue is frozen, and memory allocation with GFP...

WordPress plugin Food Store has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-4429 · WordPress · Wp Scripts Food Store

The vulnerable software is WP Scripts Food Store – Online Food Delivery & Pickup, with versions from n/a through 1.5.1 being affected. The vulnerability is an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Reflected XSS. This mean...

CVE-2025-0392

A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...

PT-2025-3863

Name of the Vulnerable Software and Affected Versions Guangzhou Huayi Intelligent Technology Jeewms versions up to 20241229 Description A critical SQL injection vulnerability was found in the function datagridGraph of the file /graphReportController.do. The manipulation of the argument store code...

PT-2025-2981 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.0-10553-gb86545e02e8c Description: A potential deadlock issue has been identified in the Linux kernel. The queue attr store function first freezes the queue -q usage counterio and then acquires -sysfs lock...

JeeWMS injection vulnerability

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the parameter storecode...

Online Shoe Store summary.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of the tid parameter in the /summary.php page against externally entered SQL statements. The vulnerability can be exploited by an attacker to...

PT-2025-8998

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock situation exists in the Linux kernel due to the queue freeze vs limits lock order in sysfs store methods. This issue arises when a user attempts to modify a limit,...

Online Shoe Store /login.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of the password parameter in the /function/login.php page against externally entered SQL statements. An attacker can exploit this vulnerabilit...

Online Shoe Store details.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details.php page that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal S...

Online Shoe Store Improper Access Control Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store has an Improper Access Control vulnerability that stems from multiple parameters in the /admin/index.php page containing an improper access control vulnerability. No details of the vulnerability are available at this time...