14054 matches found
CVE-2025-1726: Improper Neutralization of Special Elements used in an SQL Command
There is a SQL injection issue in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a remote, authenticated attacker with low privileges to improperly read limited database schema information by passing crafted queries. While it is possible to enumerate some...
PT-2025-8722
Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin files.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a newer version that contains a fix for th...
PT-2025-8321 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A 32bit overflow issue has been identified in the Linux kernel, specifically in the watchdog component rzg2l wdt. The issue arises when the value of timer cycle us can be 0 due to the...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from an out-of-bounds read in the ath5keepromreadpcalinfo5111 function...
CVE-2025-26945
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...
CVE-2025-26945
CVE-2025-26945 is a Stored XSS in the WordPress plugin Info Cards – Gutenberg block for creating Beautiful Cards. Affected: Info Cards – Gutenberg block for creating Beautiful Cards (plugin), versions up to 1.0.5 (the Initial Description specifies this range; Connected docs confirm the vulnerabil...
CVE-2025-26945 WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...
WordPress plugin Info Cards 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-26945: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...
PT-2025-7859
Name of the Vulnerable Software and Affected Versions Info Cards – Gutenberg block for creating Beautiful Cards versions 1.0.0 through 1.0.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...
Siemens SIMATIC Devices Linux Kernel Access of Uninitialized Pointer (CVE-2022-42895)
There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2capcore.c's l2capparseconfreq function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435 a732b4e62ba3157a2e This plugin onl...
February 25, 2025—KB5052094 (OS Builds 22621.4974 and 22631.4974) Preview
None None...
CVE-2024-5174
creationtimestamp| type| source ---|---|--- 2025-02-24 16:17:15+00:00| seen| https://t.me/cvedetector/18794...
WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Logan Cote Patchstack Alliance in WordPress Plugin Info Cards versions = 1.0.5...
PT-2025-8699 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A crash issue was identified, characterized as an UNKNOWN READ. The crash involves the ndpi strdup function, process ndpi collected info function, and node cleanup walker function...
PT-2025-7664 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the interceptor strncat function, process ndpi collected info, and node cleanup...
PT-2025-7665 · Git +1 · Ndpi
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN WRITE. The crash state involves several functions: ndpi free flow data, ndpi flow free, and process ndpi...
CLSA-2025-1740075135 kernel: Fix of 4 CVEs
media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 - ALSA: 6fire: Release resources at card release CVE-2024-53239 - btrfs: fix information leak in btrfsioctllogicaltoino CVE-2024-35849 - btrfs: fix use-after-free when COWing tree bock and tracing is...
PT-2025-7564
Name of the Vulnerable Software and Affected Versions Tenda AC8V4 version V16.03.34.06 Description A stack overflow issue was discovered in the function get parentControl list Info via the urls parameter. This issue affects the Tenda AC8V4 router firmware. Recommendations For Tenda AC8V4 version...