5285 matches found
CVE-2025-62118 WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through = 1.0...
WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin AdWords Conversion Tracking Code versions = 1.0...
EUVD-2025-205868
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...
CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...
CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...
CVE-2025-11964
On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...
WordPress plugin AdWords Conversion Tracking Code 跨站脚本漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scripting vulnerability exis...
libpcap 安全漏洞
libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A security vulnerability exists in libpcap, which stems from a flaw in the handling of specific characters by the utf16letoutf8truncated function, which could lead to out-of-bounds writes...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993120)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993120 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992836)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992836 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS:...
PT-2025-54319
Name of the Vulnerable Software and Affected Versions kcseopro AdWords Conversion Tracking Code versions through 1.0 Description The kcseopro AdWords Conversion Tracking Code contains a flaw related to improper neutralization of input during web page generation, leading to a Stored Cross-Site...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993235)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993235 advisory. In the Linux kernel, the following vulnerability has been resolved: virtionet: fix memory leak inside XPDTX with mergeable When we call xdpconvertbufftoframe to get...
CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...
CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992661)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992661 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in...
CVE-2022-50699
In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sleeping function called from invalid context ...
SUSE CVE-2023-54158
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...
EUVD-2022-55759
In the Linux kernel, the following vulnerability has been resolved: ext4: silence the warning when evicting inode with dioreadnolock When evicting an inode with default dioreadnolock, it could be raced by the unwritten extents converting kworker after writeback some new allocated dirty blocks. It...
CVE-2023-54158 btrfs: don't free qgroup space unless specified
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...
BTicino Legrand BTicino Driver Manager 安全漏洞
BTicino Legrand BTicino Driver Manager is a gateway integration and protocol conversion software from BTicino, Italy. A security vulnerability exists in BTicino Legrand BTicino Driver Manager that stems from a lack of proper request validation and could lead to cross-site request forgery attacks...