1905 matches found
CVE-2022-49324 mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
In the Linux kernel, the following vulnerability has been resolved: mips: cpc: Fix refcount leak in mipscpcdefaultphysbase Add the missing ofnodeput to release the refcount incremented by offindcompatiblenode...
CVE-2022-49104 staging: vchiq_core: handle NULL result of find_service_by_handle
In the Linux kernel, the following vulnerability has been resolved: staging: vchiqcore: handle NULL result of findservicebyhandle In case of an invalid handle the function findservivebyhandle returns NULL. So take care of this and avoid a NULL pointer dereference...
PT-2025-8614 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak bug was found in the setup function of the xtfpga driver in the Linux kernel. The issue occurs because the of find compatible node function returns a node pointer with ...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mipscpcdefaultphysbase not releasing the reference count of offindcompatiblenode...
The vulnerability of the Find My component in MacOS operating systems allows a perpetrator to disclose protected information.
The vulnerability of the Find My component in MacOS operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to disclose protected information...
CVE-2024-13769 Puzzles | WP Magazine / Review with Store WordPress Theme + RTL <= 4.2.4 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the 'themeoptionsajaxpostaction' AJAX action in all versions up to, and including, 4.2.4. This makes it possible for...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In ext4findextent, if the path is not large enough, we free it and set origpath to NULL. However, after reallocating the path and successfully initializing it, we do not update origpath. In this case, the caller receives a valid...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: vfs: fixed a race condition between eviceinodes and findinode&iput Hi, everyone, I recently noticed a bug in btrfs. After investigating it further, I believe it’s a race condition in vfs. Let’s assume that there’s an inode i.e.,...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: KEYS: prevented NULL pointer dereference in findasymmetrickey. In findasymmetrickey, if all NULL values are passed as arguments to id0,1,2, the kernel will first emit a WARN message, but then there will be an oops because id2 wil...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: nilfs2: A potential out-of-bounds memory access occurred in nilfsfindentry. Syzbot reported that when searching records in a directory where the isize of an inode is corrupted and has a large value, memory access outside the...
CVE-2025-20907
Improper privilege management in Samsung Find prior to SMR Feb-2025 Release 1 allows local privileged attackers to disable Samsung Find...
CVE-2025-23557
Cross-Site Request Forgery CSRF vulnerability in Kathleen Malone Find Your Reps find-your-reps allows Stored XSS.This issue affects Find Your Reps: from n/a through = 1.2...
CVE-2025-24734
Missing Authorization vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Privilege Escalation.This issue affects Better Find and Replace: from n/a through = 1.6.7...
CVE-2024-32127
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Markus Seyer Find Duplicates.This issue affects Find Duplicates: from n/a through 1.4.6...
CVE-2025-23645
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Optimize Worldwide Find Content IDs find-content-ids allows Reflected XSS.This issue affects Find Content IDs: from n/a through = 1.0...
CVE-2025-23645
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Optimize Worldwide Find Content IDs find-content-ids allows Reflected XSS.This issue affects Find Content IDs: from n/a through = 1.0...
CVE-2025-23645 WordPress Find Content IDs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Optimize Worldwide Find Content IDs allows Reflected XSS. This issue affects Find Content IDs: from n/a through 1.0...
CVE-2025-23645
CVE-2025-23645 refers to a WordPress plugin vulnerability in Find Content IDs (versions n/a through 1.0) that allows a Reflected XSS due to improper input neutralization during web page generation. This is a browser-side script execution risk triggered by crafted URLs. Public references in NVD/Re...
CVE-2025-23645 WordPress Find Content IDs plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Optimize Worldwide Find Content IDs find-content-ids allows Reflected XSS.This issue affects Find Content IDs: from n/a through = 1.0...
