CVE-2025-21481 Buffer Copy Without Checking Size of Input in HLOS

Memory corruption while performing private key encryption in trusted application...

CVE-2025-21481 Buffer Copy Without Checking Size of Input in HLOS

Memory corruption while performing private key encryption in trusted application...

CVE-2025-21476

CVE-2025-21476 concerns memory corruption when passing parameters to the Trusted Virtual Machine during the handshake on Qualcomm chipsets. The vulnerability is characterized by a Local attack with Low complexity, Low privileges required, no user interaction, and a high impact on Confidentiality,...

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

CVE-2025-21476 Buffer Copy Without Checking Size of Input in Computer Vision

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

CVE-2025-21476: Buffer Copy without Checking Size of Input

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake...

D-Link DIR-513 Router FormWPS DoS

The vulnerability of the formWPS function in the /goform/formWPS module of the D-Link DIR-513 router’s microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the webpage parameter. Exploiting this vulnerability allows a...

SUSE CVE-2025-39872

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller...

DEBIAN-CVE-2025-39872

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller...

CVE-2025-39872

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller...

UBUNTU-CVE-2025-39872

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller...

CVE-2025-39872 hsr: hold rcu and dev lock for hsr_get_port_ndev

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller...

CVE-2025-39872

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsrgetportndev hsrgetportndev calls hsrforeachport, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from hsrgetportndev not holding the rcu lock and device lock correctly, which could lead to reuse after release...

SUSE CVE-2024-47724

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: use work queue to process beacon tx event Commit 3a415daa3e8b "wifi: ath11k: add P2P IE in beacon template" from Feb 28, 2024 linux-next, leads to the following Smatch static checker warning:...

CVE-2025-57941

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JonathanMH Append Link on Copy append-link-on-copy allows Stored XSS.This issue affects Append Link on Copy: from n/a through = 0.2...

WordPress Append Link on Copy Plugin <= 0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Append Link on Copy versions = 0.2...

CVE-2025-57941 WordPress Append Link on Copy Plugin <= 0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JonathanMH Append Link on Copy append-link-on-copy allows Stored XSS.This issue affects Append Link on Copy: from n/a through = 0.2...

CVE-2025-57941

CVE-2025-57941: Stored XSS in WordPress plugin Append Link on Copy (vulnerable up to 0.2). Root cause: Improper input neutralization during web page generation. Impact: potential stored cross-site scripting via the plugin. Public details show CVSS v3.1 base score 5.9 (Medium) with Network attack ...

CVE-2025-57941 WordPress Append Link on Copy Plugin <= 0.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JonathanMH Append Link on Copy allows Stored XSS. This issue affects Append Link on Copy: from n/a through 0.2...