Lucene search
+L

11620 matches found

SUSE CVE
SUSE CVE
added 2026/05/12 3:31 a.m.11 views

SUSE CVE-2026-43294

In the Linux kernel, the following vulnerability has been resolved: drm: renesas: rz-du: mipidsi: fix kernel panic when rebooting for some panels Since commit 56de5e305d4b "clk: renesas: r9a07g044: Add MSTOP for RZ/G2L" we may get the following kernel panic, for some panels, when rebooting:...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.15 views

PT-2026-40080

Name of the Vulnerable Software and Affected Versions Intel Display Virtualization for Windows OS affected versions not specified Description Improper buffer restrictions within the Ring 2: Device Drivers may allow a denial of service. An authenticated, unprivileged software adversary can exploit...

6.8CVSS5.9AI score0.00104EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.19 views

PT-2026-40008

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aman Ninja Forms Views Display & Edit Ninja Forms Submissions on your site frontend views-for-ninja-forms allows Blind SQL Injection.This issue affects Ninja Forms Views Display & Edit Ninja Forms...

8.5CVSS5.8AI score0.00223EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.9 views

Intel Display Virtualization for Windows OS driver 缓冲区错误漏洞

The Intel Display Virtualization for Windows OS driver is a display virtualization driver developed by Intel Corporation. The Intel Display Virtualization for Windows OS driver has a buffer error vulnerability, which stems from improper buffer limits and may lead to a denial-of-service attack...

6.8CVSS6AI score0.00104EPSS
SaveExploits0References1
Intel
Intel
added 2026/05/12 12:0 a.m.17 views

Display Virtualization for Windows OS Advisory

Summary: A potential security vulnerability in some Display Virtualization for Windows OS driver software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36510 Description: Improper buffer restrictio...

6.8CVSS5.8AI score0.00104EPSS
SaveExploits0
NVD
NVD
added 2026/05/11 8:25 p.m.12 views

CVE-2026-42050

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerabilit...

5.5CVSS0.0013EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/11 7:46 p.m.10 views

EUVD-2026-29204

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerabilit...

5.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/11 7:46 p.m.9 views

CVE-2026-42050

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerabilit...

5.5CVSS5.9AI score0.0013EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/05/11 7:46 p.m.87 views

CVE-2026-42050

ImageMagick pre-7.1.2-21 and pre-6.9.13-46 is affected by a stack buffer overflow in XTileImage triggered when processing a malicious MIFF file in the display tool via the Load/Update tile action. Public sources consistently describe this as a stack buffer overflow vulnerability in XTileImage, po...

5.5CVSS5.9AI score0.0013EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/11 7:46 p.m.11 views

CVE-2026-42050

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-21 and 6.9.13-46, a malicious MIFF file could trigger an overflow when a user opens it in the display tool and right-clicks a tile to invoke the Load / Update menu item. This vulnerabilit...

5.5CVSS5.9AI score0.0013EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2026/05/11 7:35 p.m.14 views

MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner Column

Incorrect escaping of a saved filter's owner allows an attacker to inject arbitrary HTML on systems where $gshowuserrealname = ON. Impact Cross-site scripting XSS. Note that By default, only users with Manager access level or above can save their filters publicly Patches -...

7.5CVSS5.9AI score0.00419EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/11 12:0 a.m.29 views

PT-2026-39884

Name of the Vulnerable Software and Affected Versions MantisBT affected versions not specified Description Incorrect escaping of a saved filter's owner allows an attacker to inject arbitrary HTML on systems where the $g show user realname variable is set to ON, leading to Cross-site scripting XSS...

7.5CVSS5.9AI score0.00419EPSS
SaveExploits0References13
EUVD
EUVD
added 2026/05/10 3:31 p.m.26 views

EUVD-2022-55982

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS5.9AI score0.00191EPSS
SaveExploits0References4
NVD
NVD
added 2026/05/10 1:16 p.m.51 views

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS0.00191EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/10 12:12 p.m.6 views

CVE-2022-50961

WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript code through the Frontend Settings interface. Attackers can inject malicious scripts in the URL field of the Display page setting...

6.4CVSS5.9AI score0.00191EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/05/10 12:12 p.m.38 views

CVE-2022-50961

CVE-2022-50961 affects WordPress plugin IP2Location Country Blocker (v2.26.7). The stored XSS vulnerability allows authenticated users to inject arbitrary JavaScript via the Frontend Settings page, specifically by injecting scripts in the URL field of the Display page settings. The payload execut...

6.4CVSS5.9AI score0.00191EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/10 12:12 p.m.11 views

CVE-2022-50960 WordPress International Sms Contact Form 7 Integration 1.2 XSS

WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interface. Attackers can inject malicious scripts through the page parameter in class-sms-log-display.php to execute arbitrary...

6.1CVSS5.9AI score0.00187EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.27 views

PT-2026-39486

Name of the Vulnerable Software and Affected Versions IP2Location Country Blocker version 2.26.7 Description A stored cross-site scripting issue allows authenticated users to inject arbitrary JavaScript code via the Frontend Settings interface. Specifically, malicious scripts can be injected into...

6.4CVSS6AI score0.00191EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.19 views

WordPress plugin International Sms For Contact Form 7 Integration 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

6.1CVSS5.7AI score0.00187EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
added 2026/05/09 8:3 a.m.14 views

drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path

...

5.5CVSS5.8AI score0.00083EPSS
SaveExploits0
Rows per page
Query Builder