24402 matches found
CVE-2025-62052
creationtimestamp| type| source ---|---|--- 2025-10-22 14:45:41+00:00| seen| Telegram/6v0RRRAkSgFI53Ozh9ktSLze6kLmyFPTzDY27D8bZ0FkA0...
CVE-2025-62027 WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...
CVE-2025-62042
CVE-2025-62042 is a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin “Event post” (event-post) affecting versions up to and including 5.10.3. The issue stems from improper input neutralization during web page generation, enabling an attacker to inject malicious scripts. Exploitati...
CVE-2025-62027 WordPress Event Tickets plugin <= 5.26.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through = 5.26.3...
CVE-2025-62042 WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through = 5.10.3...
CVE-2025-62042 WordPress Event post plugin <= 5.10.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a through = 5.10.3...
CVE-2025-62027
CVE-2025-62027 concerns a Missing Authorization (broken access control) in StellarWP Event Tickets (WordPress plugin) affecting Event Tickets versions up to 5.26.3. The connected Wordfence report confirms a missing authorization issue for Event Tickets and lists it under Missing Authorization wit...
CVE-2023-53693
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in rawgadget driver Currently, increasing rawdev-count happens before invoke the rawqueueevent, if the rawqueueevent return error, invoke rawrelease will not trigger the devfree to be called...
UBUNTU-CVE-2023-53693
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in rawgadget driver Currently, increasing rawdev-count happens before invoke the rawqueueevent, if the rawqueueevent return error, invoke rawrelease will not trigger the devfree to be called...
CVE-2023-53693
CVE-2023-53693 : Linux kernel USB gadget raw_gadget driver memory leak fixed. Root cause: raw_dev->count was incremented before raw_queue_event(); if raw_queue_event() failed, dev_free() was not triggered. The related commit ensures kref_get() is invoked only when raw_queue_event() succeeds, a...
CVE-2023-53693 USB: gadget: Fix the memory leak in raw_gadget driver
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in rawgadget driver Currently, increasing rawdev-count happens before invoke the rawqueueevent, if the rawqueueevent return error, invoke rawrelease will not trigger the devfree to be called...
CVE-2023-53693 USB: gadget: Fix the memory leak in raw_gadget driver
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix the memory leak in rawgadget driver Currently, increasing rawdev-count happens before invoke the rawqueueevent, if the rawqueueevent return error, invoke rawrelease will not trigger the devfree to be called...
CVE-2022-50562 tpm: acpi: Call acpi_put_table() to fix memory leak
In the Linux kernel, the following vulnerability has been resolved: tpm: acpi: Call acpiputtable to fix memory leak The start and length of the event log area are obtained from TPM2 or TCPA table, so we call acpigettable to get the ACPI information, but the acpigettable should be coupled with...
CVE-2022-50561 iio: fix memory leak in iio_device_register_eventset()
In the Linux kernel, the following vulnerability has been resolved: iio: fix memory leak in iiodeviceregistereventset When iiodeviceregistersysfsgroup returns failed, iiodeviceregistereventset needs to free attrs array. Otherwise, kmemleak would scan & report memory leak as below: unreferenced...
CVE-2025-10611
creationtimestamp| type| source ---|---|--- 2025-10-22 08:50:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3rhotwacj2o 2025-10-28 07:28:27+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m4afurktde2g 2025-10-28 07:39:33+00:00| seen|...
CVE-2025-10047
creationtimestamp| type| source ---|---|--- 2025-10-22 08:43:27+00:00| seen| Telegram/FFtZEHaJii0mDOFQU4Ym-Bjt-tRCF36hzqTFs6qYYhcEycQ...
OpenWrt 安全漏洞
OpenWrt is the OpenWrt open source set of Linux operating systems for embedded devices. A security vulnerability exists in versions prior to OpenWrt 24.10.4 that stems from a heap buffer overflow in the event registration parsing code, which could lead to the execution of arbitrary code and bypas...
WordPress plugin Event Tickets 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
PT-2025-43134
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.10 through 18.3.4 GitLab CE/EE versions 18.4 through 18.4.2 GitLab CE/EE versions 18.5 through 18.5.0 Description An issue in GitLab CE/EE could allow an unauthenticated attacker to cause a denial of service condition ...
PT-2025-43094
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's USB gadget driver contains a memory leak in the raw gadget driver. Specifically, the raw dev-count is incremented before the raw queue event function is invoked. If ra...