Lucene search
+L

11604 matches found

CNVD
CNVD
•added 2025/07/30 12:00 a.m.•21 views

WordPress Get Youtube Subs Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress Get Youtube Subs, which stems from insufficient input cleanup and output escaping, and can be exploited by an...

6.4CVSS5.7AI score0.00461EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/30 12:00 a.m.•12 views

WordPress WP Applink Cross-Site Scripting Vulnerability

WordPress WP Applink is a WordPress plugin for generating iTunes affiliate links, which is mainly used for embedding promotional links to iTunes products such as iPhone, iPad, Mac apps and music, movies and so on in posts. WordPress WP Applink suffers from a cross-site scripting vulnerability tha...

6.4CVSS5.7AI score0.00339EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/07/30 12:00 a.m.•15 views

WordPress Station Pro Cross-Site Scripting Vulnerability

WordPress Station Pro is a plugin designed for the WordPress platform, mainly used to enhance the functionality of the website and provide audio streaming management solutions. WordPress Station Pro suffers from a cross-site scripting vulnerability that stems from insufficient input cleanup and...

6.4CVSS5.8AI score0.00461EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/07/29 12:00 a.m.•20 views

Linux kernel Wi-Fi DoS

The vulnerability of the Linux operating system’s kernel Wi-Fi component is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

7CVSS6.4AI score0.00224EPSS
SaveExploits0References9Affected Software5
CNNVD
CNNVD
•added 2025/07/29 12:00 a.m.•15 views

WordPress plugin StreamWeasels YouTube Integration – Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.4CVSS5.5AI score0.00246EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/29 12:00 a.m.•17 views

WordPress plugin StreamWeasels Kick Integration: Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

5.4CVSS5.5AI score0.00223EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/07/29 12:00 a.m.•15 views

WordPress plugin Appzend has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS5.5AI score0.00332EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/07/29 12:00 a.m.•20 views

WordPress plugin MetForm has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.4CVSS5.5AI score0.00197EPSS
SaveExploits0References2
Redos
Redos
•added 2025/07/29 12:00 a.m.•13 views

ROS-20250729-01

A vulnerability in the django.utils.html.urlize function of the Django web application software platform is related to an incorrect resource cleanup or release. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service A vulnerability in the Django w...

7.5CVSS6.3AI score0.25773EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/07/29 12:00 a.m.•19 views

Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Avast...

7.8CVSS6.7AI score0.00224EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2025/07/29 12:00 a.m.•18 views

Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Avast...

7.8CVSS6.7AI score0.00173EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/07/28 11:23 p.m.•9 views

SUSE CVE-2025-38400

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...

4.4CVSS6AI score0.00222EPSS
SaveExploits0References23
NVD
NVD
•added 2025/07/28 12:15 p.m.•13 views

CVE-2025-38469

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...

5.5CVSS0.00167EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2025/07/28 12:15 p.m.•22 views

UBUNTU-CVE-2025-38469

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...

5.5CVSS5.8AI score0.00167EPSS
SaveExploits0References29
Cvelist
Cvelist
•added 2025/07/28 11:21 a.m.•32 views

CVE-2025-38469 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls kvmxenschedoppoll does a kmallocarray when a VM polls the host for more than one event channel potr nrports 1. After the kmallocarray, the error paths ne...

0.00167EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/07/28 12:00 a.m.•12 views

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ufshcderrhandlingprepare function in Linux kernels is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

7CVSS6.8AI score0.00191EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/07/28 12:00 a.m.•23 views

Linux Bluetooth DoS

The vulnerability of the Linux operating system’s Bluetooth kernel component is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.3CVSS6.4AI score0.00187EPSS
SaveExploits0References10Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/07/28 12:00 a.m.•22 views

Linux mt76_dma_cleanup() DoS

The vulnerability of the mt76dmacleanup function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS6.8AI score0.00214EPSS
SaveExploits0References19Affected Software9
BDU FSTEC
BDU FSTEC
•added 2025/07/28 12:00 a.m.•30 views

NETGEAR RAX30 Resource Leak DoS

The vulnerability of NETGEAR RAX30 router microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.7CVSS6.6AI score0.00652EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/07/28 12:00 a.m.•24 views

Linux icl_update_topdown_event() DoS

The vulnerability of the iclupdatetopdownevent function in the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.8AI score0.00197EPSS
SaveExploits0References13Affected Software6
Rows per page
Query Builder