Lucene search
+L

5285 matches found

Vulnrichment
Vulnrichment
added 2025/12/31 12:59 p.m.3 views

CVE-2025-62118 WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through = 1.0...

6.5CVSS5.9AI score0.00132EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 12:58 p.m.12 views

WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin AdWords Conversion Tracking Code versions = 1.0...

6.5CVSS6AI score0.00132EPSS
SaveExploits0Affected Software1
EUVD
EUVD
added 2025/12/31 3:30 a.m.5 views

EUVD-2025-205868

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS6.4AI score0.00106EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/31 12:58 a.m.43 views

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS0.00106EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/31 12:58 a.m.4 views

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS6.6AI score0.00106EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2025/12/31 12:58 a.m.10 views

CVE-2025-11964

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS5.3AI score0.00106EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.6 views

WordPress plugin AdWords Conversion Tracking Code 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scripting vulnerability exis...

6.5CVSS6AI score0.00132EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.8 views

libpcap 安全漏洞

libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A security vulnerability exists in libpcap, which stems from a flaw in the handling of specific characters by the utf16letoutf8truncated function, which could lead to out-of-bounds writes...

1.9CVSS6.3AI score0.00106EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.14 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993120 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in...

7.1CVSS6.2AI score0.00202EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.6 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992836)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992836 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d NFS:...

7.5CVSS6.2AI score0.00618EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.10 views

PT-2025-54319

Name of the Vulnerable Software and Affected Versions kcseopro AdWords Conversion Tracking Code versions through 1.0 Description The kcseopro AdWords Conversion Tracking Code contains a flaw related to improper neutralization of input during web page generation, leading to a Stored Cross-Site...

6.5CVSS5.8AI score0.00132EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/31 12:0 a.m.7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993235)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993235 advisory. In the Linux kernel, the following vulnerability has been resolved: virtionet: fix memory leak inside XPDTX with mergeable When we call xdpconvertbufftoframe to get...

5.5CVSS6.1AI score0.00159EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/30 4:56 p.m.4 views

CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

5.3CVSS7.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/30 4:56 p.m.2 views

CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

5.3CVSS7AI score0.00533EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/12/30 12:0 a.m.11 views

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992661)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992661 advisory. In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpinfitctl Syzkaller has reported a warning in...

7.1CVSS6.2AI score0.00202EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/25 12:10 p.m.8 views

CVE-2022-50699

In the Linux kernel, the following vulnerability has been resolved: selinux: enable use of both GFPKERNEL and GFPATOMIC in convertcontext The following warning was triggered on a hardware environment: SELinux: Converting 162 SID table entries... BUG: sleeping function called from invalid context ...

5.5CVSS5.6AI score0.00175EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/12/25 12:54 a.m.6 views

SUSE CVE-2023-54158

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...

6.5AI score0.00214EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/24 3:30 p.m.4 views

EUVD-2022-55759

In the Linux kernel, the following vulnerability has been resolved: ext4: silence the warning when evicting inode with dioreadnolock When evicting an inode with default dioreadnolock, it could be raced by the unwritten extents converting kworker after writeback some new allocated dirty blocks. It...

6AI score0.00214EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/12/24 1:7 p.m.38 views

CVE-2023-54158 btrfs: don't free qgroup space unless specified

In the Linux kernel, the following vulnerability has been resolved: btrfs: don't free qgroup space unless specified Boris noticed in his simple quotas testing that he was getting a leak with Sweet Tea's change to subvol create that stopped doing a transaction commit. This was just a side effect o...

0.00214EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.7 views

BTicino Legrand BTicino Driver Manager 安全漏洞

BTicino Legrand BTicino Driver Manager is a gateway integration and protocol conversion software from BTicino, Italy. A security vulnerability exists in BTicino Legrand BTicino Driver Manager that stems from a lack of proper request validation and could lead to cross-site request forgery attacks...

5.3CVSS6AI score0.00225EPSS
SaveExploits2References4
Rows per page
Query Builder