CVE-2025-31462

CVE-2025-31462 affects the CGM Event Calendar plugin for WordPress. The issue is a reflected XSS due to improper handling of user input during web page generation. Affected versions are CGM Event Calendar

CVE-2025-31462 WordPress CGM Event Calendar <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in rzfarrell CGM Event Calendar allows Reflected XSS. This issue affects CGM Event Calendar: from n/a through 0.8.5...

CVE-2025-31803

creationtimestamp| type| source ---|---|--- 2025-04-01 20:33:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10012...

CVE-2025-21971

creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:41+00:00| seen| https://t.me/cvedetector/21794...

CVE-2025-21979

creationtimestamp| type| source ---|---|--- 2025-04-01 19:44:23+00:00| seen| https://t.me/cvedetector/21780...

CVE-2025-31824

creationtimestamp| type| source ---|---|--- 2025-04-01 18:33:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9980...

CVE-2025-24198

creationtimestamp| type| source ---|---|--- 2025-04-01 18:32:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9973...

CVE-2025-31872

creationtimestamp| type| source ---|---|--- 2025-04-01 18:03:58+00:00| seen| https://t.me/cvedetector/21774...

CVE-2025-25041

creationtimestamp| type| source ---|---|--- 2025-04-01 17:32:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9960 2025-04-01 19:44:19+00:00| seen| https://t.me/cvedetector/21778...

WordPress CGM Event Calendar plugin <= 0.8.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by johska in WordPress Plugin CGM Event Calendar versions = 0.8.5...

CVE-2025-30802

creationtimestamp| type| source ---|---|--- 2025-04-01 16:32:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9939...

CVE-2025-21986

In the Linux kernel, the following vulnerability has been resolved: net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chain. The semaphore is acquired for writing when adding / removing...

CVE-2025-21970

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEVCHANGEUPPER event is triggered. Driver finds the lower devices PFs to flush all the offloaded entries. And mlx5lagissharedfdb i...

CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

AZL-59946 CVE-2025-21948 affecting package kernel for versions less than 6.6.85.1-2

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

AZL-59960 CVE-2025-21948 affecting package kernel for versions less than 5.15.180.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

DEBIAN-CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

CVE-2025-21899

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix bad hist from corrupting namedtriggers list The following commands causes a crash: cd /sys/kernel/tracing/events/rcu/rcucallback echo 'hist:name=bad:keys=commonpid:onmaxbogus.savecommonpid' trigger bash: echo: write...

UBUNTU-CVE-2025-21948

In the Linux kernel, the following vulnerability has been resolved: HID: appleir: Fix potential NULL dereference at raw event handle Syzkaller reports a NULL pointer dereference issue in inputevent. BUG: KASAN: null-ptr-deref in instrumentatomicread include/linux/instrumented.h:68 inline BUG:...

CVE-2025-21970 net/mlx5: Bridge, fix the crash caused by LAG state check

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Bridge, fix the crash caused by LAG state check When removing LAG device from bridge, NETDEVCHANGEUPPER event is triggered. Driver finds the lower devices PFs to flush all the offloaded entries. And mlx5lagissharedfdb i...