11783 matches found
CVE-2025-47543 WordPress TrueBooker plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) Vulnerability
Cross-Site Request Forgery CSRF vulnerability in themetechmount TrueBooker truebooker-appointment-booking allows Cross Site Request Forgery.This issue affects TrueBooker: from n/a through = 1.0.7...
CVE-2025-47518 WordPress Contact Form 7 – PayPal & Stripe Add-on <= 2.3.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Scott Paterson Contact Form 7 – PayPal & Stripe Add-on allows Stored XSS. This issue affects Contact Form 7 – PayPal & Stripe Add-on: from n/a through 2.3.4...
CVE-2025-47475 WordPress JupiterX Core plugin <= 4.8.11 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in artbees JupiterX Core jupiterx-core allows Stored XSS.This issue affects JupiterX Core: from n/a through = 4.8.11...
CVE-2025-47448
CVE-2025-47448 describes a CSRF vulnerability in the WordPress plugin WP Hotel Booking affecting versions n/a through 2.1.9. Public sources identify the issue as CSRF in this plugin; no exploit details are provided in the documents. Impact is described as unauthorized actions on behalf of an auth...
CVE-2025-0667
The CVE-2025-0667 issue is a Stored XSS in BOINC Server caused by improper neutralization of input during web page generation. Affected are BOINC Server releases up to and including 1.4.7; the vulnerability stems from the pm.php path and can enable stored XSS without user interaction beyond visit...
PT-2025-22210
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer fault was reported in the xenbus thread callstack. The issue occurs when the req object is freed while the xenbus thread is still using it, causing a kernel NULL pointer...
BOINC Server 安全漏洞
BOINC Server is an open source distributed computing platform server from the US-based BOINC organization for creating and managing volunteer computing projects. A security vulnerability exists in BOINC Server version 1.4.7 and earlier, which stems from improper input neutralization during web pa...
CVE-2025-4344
A vulnerability, which was classified as critical, was found in D-Link DIR-600L up to 2.07B01. This affects the function formLogin. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. This vulnerability only affects products that are no...
CVE-2023-53127
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mrremove Add a missing resource clean up in .remove...
CVE-2023-53127 scsi: mpi3mr: Fix expander node leak in mpi3mr_remove()
In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix expander node leak in mpi3mrremove Add a missing resource clean up in .remove...
CVE-2023-53127
In CVE-2023-53127, the Linux kernel SCSI MPI3MR driver had a leak in the mpi3mr_remove() cleanup path (expander node leak) due to a missing resource cleanup. The fix adds the missing cleanup in .remove(), mitigating an information/resource leak with a Local attack vector and, per the NVD entry, a...
CVE-2023-53072 mptcp: use the workqueue to destroy unaccepted sockets
In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token lookup time after having refactored the passive socket initialization part: BUG: KASAN: use-after-free in tokenbucketbusy+0x253/0x260 Read o...
PT-2025-22163
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, which prevented crashes when trying to handle non-wake GPIOs on Qualcomm chipsets. The issue occurred because not all GPIOs are...
CVE-2025-37760
Technical details about CVE-2025-37760 are not provided in the supplied connected documents. No affected product/version or fix is specified here. Monitor for updates.
CVE-2025-37760 mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
In the Linux kernel, the following vulnerability has been resolved: mm/vma: add giveuponoom option on modify/merge, use in uffd release Currently, if a VMA merge fails due to an OOM condition arising on commit merge or a failure to duplicate anonvma's, we report this so the caller can handle it...
CVE-2025-37760 mm/vma: add give_up_on_oom option on modify/merge, use in uffd release
In the Linux kernel, the following vulnerability has been resolved: mm/vma: add giveuponoom option on modify/merge, use in uffd release Currently, if a VMA merge fails due to an OOM condition arising on commit merge or a failure to duplicate anonvma's, we report this so the caller can handle it...
CVE-2025-3394
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Automation Builder.This issue affects Automation Builder: through 2.8.0...
HPESBHF04856 rev.1 - HPE Superdome Flex, Superdome Flex 280, and Compute Scale-up Server 3200, Local Buffer Overflow
Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Superdome Flex Server Prior to v4.5.6 HPE Superdome Flex 280 Server Prior to v2.00.12 HPE Compute Scale-up Server 3200 Prior to v1.50.120 CVSS Scores: | CVE | CVSS Vector | Base...
CVE-2024-57375
Andamiro Pump It Up 20th Anniversary aka Double X or XX/2019 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service application crash via certain deselect actions...