20019 matches found
WordPress Bitspecter Suite plugin <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Avraham Shemesh in WordPress Plugin Bitspecter Suite versions = 1.0.0...
Imagination GPU Driver 安全漏洞
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that stems from an improper GPU system call that could lead to kernel heap memory corruption...
The vulnerability of the `init_overdrivelimits()` function in the Linux kernel’s drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c file allows a malicious actor to trigger a service failure.
The vulnerability of the initoverdrivelimits function in the drivers/gpu/drm/amd/pm/powerplay/hwmgr/processpptables.c file of the Linux kernel is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to trigger a service failure...
Imagination GPU Driver 安全漏洞
Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in Imagination GPU Driver that stems from improper GPU system calls that could result in reading and writing arbitrary physical memory pages...
WordPress plugin CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts 跨站请求伪造漏洞
WordPress and the WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin CITS Support svg, webp Media a...
The vulnerability of the is_dsc_need_re_compute() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c file of the driver support infrastructure for AMD graphics cards in Linux operating systems allows a attacker to cause a service failure.
The vulnerability of the isdscneedrecompute function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmmsttypes.c file of the DRI support driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...
The vulnerability of the a6xx_gpu_init() function in the drivers/gpu/drm/msm/adreno/a6xx_gpu.c kernel of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the resource_log_pipe_topology_update() function in the drivers/gpu/drm/amd/display/dc/core/dc_resource.c file of the DRI support driver for AMD graphics cards in Linux operating systems allows a malicious actor to cause a service failure.
The vulnerability of the resourcelogpipetopologyupdate function in the drivers/gpu/drm/amd/display/dc/core/dcresource.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems, relates to pointer manipulation. Exploiting this vulnerability could allow ...
Vulnerability of the function dcn30_apply_idle_power_optimizations() in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30HWSeq.c module of the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the dcn30applyidlepoweroptimizations function in the drivers/gpu/drm/amd/display/dc/dcn30/dcn30HWSeq.c module of the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLSA-2025-1742469561 kernel: Fix of 19 CVEs
net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - smb: client: fix potential deadlock when releasing mids CVE-2023-52757 - tcp/dccp: Don't use timerpending in reqskqueueunlink. CVE-2024-50154 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - smb: client: fix...
Inflectra SpiraTeam 安全漏洞
Inflectra SpiraTeam is a project management software from Inflectra, Inc. It is used for the management and delivery of software development and testing projects. A security vulnerability exists in Inflectra SpiraTeam version 7.2.00, which stems from the fact that uploading specially crafted SVG...
The vulnerability of the enable_phantom_plane() function in the drivers/gpu/drm/amd/display/dc/dml2/dml2_mall_phantom.c kernel of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the enablephantomplane function in the drivers/gpu/drm/amd/display/dc/dml2/dml2mallphantom.c kernel of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
dify 跨站脚本漏洞
dify is an open source LLM application development platform from LangGenius Open Source. A cross-site scripting vulnerability exists in dify, which stems from improper validation and cleanup of user input in the SVG markdown support and could lead to a stored cross-site scripting attack...
Cross-site Scripting (XSS)
Overview contao/core-bundle is an Open Source PHP Content Management System for people who want a professional website that is easy to maintain. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the uploadTo function in FileUpload.php. An attacker can execute scripts...
The vulnerability of the amdgpu_dm_fini() function in the drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c driver module allows a hacker to cause a service failure in Linux-based AMD graphics cards that support Direct Rendering Infrastructure (DRI).
The vulnerability of the amdgpudmfini function in the drivers/gpu/drm/amd/display/amdgpudm/amdgpudm.c driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLSA-2025-1742319829 Fix of 27 CVEs
CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neighperiodicwork CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in cfg80211getstation CVE-url: https://ubuntu.com/security/CVE-2024-43863 - drm/vmwgfx: Fix a deadlock in dma...
CLSA-2025-1742319747 Fix of 29 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-50180 - fbdev: sisfb: Fix strbuf array overflow CVE-url: https://ubuntu.com/security/CVE-2023-52522 - net: fix possible store tearing in neighperiodicwork CVE-url: https://ubuntu.com/security/CVE-2024-40911 - wifi: cfg80211: Lock wiphy in...
PT-2025-18444
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use after free bug was detected by KASAN in the Linux kernel, specifically in the drm/imagination module. The issue occurs when the fragment job is being prepared by the GPU scheduler...
Contao 跨站脚本漏洞
Contao is Contao open source a set of open source content management system CMS developed using PHP. The system supports search engines, rights management, and CSS frameworks. Contao suffers from a cross-site scripting vulnerability that stems from the fact that users can upload SVG files...
