20019 matches found
WordPress plugin goodlayers-core 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in...
drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
...
drm/amdgpu: fix usage slab after free
...
The vulnerability in the driver/gpu/drm/amd/amdkfd/kfd InterruptInterrupt.c component of the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the drivers/gpu/drm/amd/amdkfd/kfd InterruptInterrupt.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
NVIDIA GPU Display Driver 缓冲区错误漏洞
NVIDIA GPU Display Driver is an American NVIDIA driver for interactive support of graphics card display modules in operating systems. A buffer error vulnerability exists in NVIDIA GPU Display Driver, which stems from the inclusion of a vulnerability that could allow an attacker to gain unauthoriz...
NVIDIA GPU Display Driver 缓冲区错误漏洞
NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation for interactive support of graphics card display modules in operating systems. A buffer error vulnerability exists in NVIDIA GPU Display Driver, which stems from a vulnerability containing a hole where data is written to the e...
NVIDIA vGPU software 安全漏洞
NVIDIA vGPU Software is a management software from NVIDIA, USA, used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security vulnerabili...
Security update for the Linux Kernel (Live Patch 42 for SLE 15 SP3)
This update for the Linux Kernel 5.3.18-15030059153 fixes several issues. The following security issues were fixed: CVE-2024-36971: Fixed dstnegativeadvice race bsc1226324. CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk-trans bsc1233712. CVE-2022-48956: ipv6...
InnoShop 安全漏洞
InnoShop is an open source e-commerce system based on Laravel 11 by InnoShop Open Source. A security vulnerability exists in InnoShop V.0.3.8 and earlier versions, which stems from vulnerability to cross-site scripting XSS attacks via SVG file upload...
LunaSVG 安全漏洞
LunaSVG is a standalone C SVG rendering library. A security vulnerability exists in LunaSVG, which stems from the inclusion of a segmentation violation found via the component compositionsourceover. No detailed vulnerability details are provided at this time...
The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the GDI+ component in Microsoft Office programs and the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the GDI+ component in Microsoft Office programs and the Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
SUSE CVE-2024-57922
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add check for granularity in dml ceil/floor helpers Why Wrapper functions for dcnbwceil2 and dcnbwfloor2 should check for granularity is non zero to avoid assert and divide-by-zero error in dcnbw functions. How A...
UBUNTU-CVE-2024-57926
In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Set private-alldrmprivatei-drm to NULL if mtkdrmbind returns err The pointer need to be set to NULL, otherwise KASAN complains about use-after-free. Because in mtkdrmbind, all private's drm are set as follows...
CVE-2025-21644
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but in the process it tries to do stuff that may not be initialized yet. This moves the xegttlbinvalidationinit to be done earlier: as its own doc...
UBUNTU-CVE-2025-21644
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but in the process it tries to do stuff that may not be initialized yet. This moves the xegttlbinvalidationinit to be done earlier: as its own doc...
PT-2025-3703 · WordPress · Import Any Xml/Csv File To Wordpress
Name of the Vulnerable Software and Affected Versions: Import any XML or CSV File to WordPress PRO plugin versions up to, and including, 4.9.7 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This...
Microsoft Graphics Component elevation of privilege vulnerability (CNVD-2025-02131)
Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit the vulnerability to elevate privileges...
GIMP: Multiple Vulnerabilities
Background GIMP is the GNU Image Manipulation Program. XCF is the native image file format used by GIMP. Description Multiple vulnerabilities have been discovered in GIMP. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for...
matrix-media-repo 代码问题漏洞
matrix-media-repo is a highly configurable multi-domain media repository for Matrix in the t2bot.io open source. A code issue vulnerability exists in matrix-media-repo that stems from the fact that if Matrix Media Repo has SVG or JPEGXL thumbnails enabled, a user can upload files claiming to be o...