WordPress esri-map-view cross-site scripting vulnerability

WordPress esri-map-view is used to embed Esri/ArcGIS maps or scenes in websites. The plugin realizes map display through short code, supports selecting base map, setting initial view angle, adding custom layers, pop-up information window and other functions, and can embed preconfigured web maps o...

WordPress Flex Guten Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Flex Guten, which stems from insufficient input cleanup and escaping, and can be exploited by an attacke...

CVE-2025-38500: Use After Free

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing collectmd xfrm interface collectmd property on xfrm interfaces can only be set on device creation, thus xfrmichangelink should fail when called on such interfaces. The check to...

BIT-LIBPHP-2020-7062 Null Pointer Dereference in PHP Session Upload Progress

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.uploadprogress.cleanup is set to 0 disabled, and the file upload fails, the upload procedure would try to clean up data that does...

kernel: PCI/pwrctrl: Cancel outstanding rescan work when unregistering

In the Linux kernel, the following vulnerability has been resolved: PCI/pwrctrl: Cancel outstanding rescan work when unregistering It's possible to trigger use-after-free here by: a forcing rescanworkfunc to take a long time and b utilizing a pwrctrl driver that may be unloaded for some reason...

D-Link DIR-615H1 Command Injection Vulnerability

The D-Link DIR-615H1 is a wireless router from China's AUO D-Link. The D-Link DIR-615H1 suffers from a command injection vulnerability, which stems from insufficient cleanup of the toolsvct.htm endpoint input, that can be exploited by an attacker to cause remote code execution...

Linux Distros Unpatched Vulnerability : CVE-2024-56661

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in cleanupbearer syzbot found 1 that after blamed commit, ub-ubsock-sk...

Linux Distros Unpatched Vulnerability : CVE-2021-47063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm: bridge/panel: Cleanup connector on bridge detach If we don't call drmconnectorcleanup...

Netgear DGN2200B Code Execution Vulnerability

The Netgear DGN2200B is a wireless router from Netgear USA. A code execution vulnerability exists in Netgear DGN2200B 1.0.0.36 and earlier versions, which stems from insufficient pppoe.cgi endpoint input cleanup, and can be exploited by an attacker to potentially cause remote code execution...

PT-2025-39127

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s dmaengine subsystem, specifically within the idxd setup wqs function. The issue involves a potential double free condition during cleanup operations...

Linux Distros Unpatched Vulnerability : CVE-2023-53105

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5e: Fix cleanup null-ptr deref on encap lock During module is unloaded while a peer tc flow is still offloaded, first the peer uplink rep profile is...

Linux Distros Unpatched Vulnerability : CVE-2023-53023

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: nfc: Fix use-after-free in localcleanup Fix a use-after-free that occurs in kfreeskb called from localcleanup. This could happen when killing nfc daemon e....

Linux Distros Unpatched Vulnerability : CVE-2021-47356

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mISDN: fix possible use-after-free in HFCcleanup This module's remove path calls deltimer. However, that function does not wait until the timer handler finishes...

Linux Distros Unpatched Vulnerability : CVE-2025-21822

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ptp: vmclock: Set driver data before its usage If vmclockptpregister fails during probing,...

Linux Distros Unpatched Vulnerability : CVE-2025-37871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: decrease sccount directly if fail to queue dlrecall A deadlock warning occurred when...

Linux Distros Unpatched Vulnerability : CVE-2022-50135

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix BUG: KASAN: null-ptr- deref in rxeqpdocleanup The function rxecreateqp calls...

Linux Distros Unpatched Vulnerability : CVE-2025-21882

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix vport QoS cleanup on error When enabling vport QoS fails, the scheduling node...

Linux Distros Unpatched Vulnerability : CVE-2021-29649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 5.11.11. The user mode driver UMD has a copyprocess memory leak, related to a lack of cleanup steps in...

Linux Distros Unpatched Vulnerability : CVE-2025-38389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/i915/gt: Fix timeline left held on VMA alloc error The following error has been reported sporadically by CI when a test unbinds the i915 driver on a ring...

Linux Distros Unpatched Vulnerability : CVE-2025-38100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: x86/iopl: Cure TIFIOBITMAP inconsistencies iobitmapexit is invoked from exitthread when a ta...