24399 matches found
CVE-2025-45663
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
EUVD-2025-37484
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
CVE-2025-45663
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure...
CentOS 9 : kernel-5.14.0-632.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-632.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Detect events pointing to unexpected TREs When a...
CVE-2025-11995
The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9khtc: Abort software beacon handling if disabled. A malicious USB device can send an WMISWBAEVENTID event from an ath9khtc-managed device before beaconing is enabled. This causes a device-by-zero error in the driver,...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Wifi: ath12k: fixed a memory leak in ath12kservicereadyextevent. Currently, in ath12kservicereadyextevent, svcrdyext.macPhyCaps is not freed in the failed case, resulting in a memory leak. The following trace is observed in...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Tracing: Add downwritetraceeventsem when adding a trace event. When a module is loaded, it adds trace events defined by that module. It may also be necessary to modify the module’s trace printk formats by replacing enum names wit...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: drm/mediatek: Added error handling for the old state CRTC in atomicdisable. Introduced error handling to address a issue where, after a hotplug event, the cursor continues to update. This situation can lead to a kernel panic d...
CVE-2025-6574
creationtimestamp| type| source ---|---|--- 2025-11-01 06:55:16+00:00| seen| Telegram/-wHidLGW5P36MluvV33672bS6VSjMD8XVsmg0nrOKxXd24...
EUVD-2025-37417
The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-11995
The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2025-11995 Community Events <= 1.5.2 - Unauthenticated Stored Cross-Site Scripting
The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...
CVE-2019-10647
creationtimestamp| type| source ---|---|--- 2025-10-31 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jerlkmva2e 2025-12-04 13:05:15+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2019-10647.yaml 2025-12-06...
CVE-2025-12554
creationtimestamp| type| source ---|---|--- 2025-10-31 17:59:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4j2jjg2di2k...
CVE-2020-36858
creationtimestamp| type| source ---|---|--- 2025-10-31 17:56:44+00:00| seen| Telegram/MGXyjKZXtv7r0oJ3ajlBwGta5OlBzAghy5oF4FCu6djT2M...
CVE-2023-7323
creationtimestamp| type| source ---|---|--- 2025-10-31 17:56:42+00:00| seen| Telegram/ConIAbX4Rbn2orWEHay54JRXZtEJVbLtqtj2YA1CnppH90c...
CVE-2020-36857
creationtimestamp| type| source ---|---|--- 2025-10-31 17:56:38+00:00| seen| Telegram/m9niFbw1UwnJsuZeMoQgNt26WVcu9Tw-ebxLplJ7rit8WYw...