17581 matches found
ROOT-OS-DEBIAN-12-CVE-2024-25629 CVE-2024-25629 in rootio-c-ares - Patched by Root
Root has patched CVE-2024-25629 in the rootio-c-ares package for Root:Debian:12. Multiple fixed versions available...
CVE-2025-8621
The Mosaic Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘c’ parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
CVE-2025-8621 Mosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameter
The Mosaic Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘c’ parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
CVE-2025-8621 Mosaic Generator <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'c' Parameter
The Mosaic Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘c’ parameter in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...
PT-2025-32701 · Intel · Intel Oneapi Dpc++/C++ Compiler
Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler affected versions not specified Description: Incorrect default permissions in some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially escalate privileges via...
Linux Distros Unpatched Vulnerability : CVE-2021-47268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port A pending...
Intel TinyCBOR Library 安全漏洞
Intel TinyCBOR Library is a C language library from Intel Corporation USA. A security vulnerability exists in Intel TinyCBOR Library versions prior to 0.6.1, which stems from uncontrolled recursion and could lead to a denial of service...
PT-2025-32619 · WordPress · Mosaic Generator
Name of the Vulnerable Software and Affected Versions: Mosaic Generator plugin for WordPress versions up to and including 1.0.5 Description: The Mosaic Generator plugin for WordPress is susceptible to Stored Cross-Site Scripting through the c parameter due to insufficient input sanitization and...
Linux Distros Unpatched Vulnerability : CVE-2025-37809
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Fix NULL pointer access Concurrent calls to typecpartnerunlinkdevice can...
Linux Distros Unpatched Vulnerability : CVE-2025-7396
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C...
SUSE CVE-2025-8736
A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclose...
CVE-2025-8846
A vulnerability has been found in NASM Netwide Assember 2.17rc0. Affected is the function parseline of the file parser.c. The manipulation leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used...
CVE-2025-8845 NASM Netwide Assember nasm.c assemble_file stack-based overflow
A vulnerability was identified in NASM Netwide Assember 2.17rc0. This issue affects the function assemblefile of the file nasm.c. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the machonodeadstrip function of the outmacho.c file. An attacker can cause a denial of service or unintended behavior by providing specially crafted input. Remediation There is no fixed version for nasm...
CVE-2025-8843
A vulnerability was found in NASM Netwide Assember 2.17rc0. This affects the function machonodeadstrip of the file outmacho.c. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used...
Linux Distros Unpatched Vulnerability : CVE-2016-7913
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The xc2028setconfig function in drivers/media/tuners/tuner-xc2028.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of...
The vulnerability in the driver/net/ethernet/intel/ice/ice_main.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/net/ethernet/intel/ice/icemain.c module of the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2022-40768
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stexqueuecommandlck lacks a...
Linux Distros Unpatched Vulnerability : CVE-2022-23218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The deprecated compatibility function svcunixcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its path argument on the stack witho...
Linux Distros Unpatched Vulnerability : CVE-2016-6197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry before proceeding with...