Lucene search
+L

10 matches found

AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•12 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: igb: Fixed NULL pointer dereferencing in the ethtool loopback test. The igb driver currently causes a NULL pointer dereferencing when executing the ethtool loopback test. This occurs because there is no associated q-vector for th...

5.5CVSS5.2AI score0.00127EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/10/16 8:33 a.m.•13 views

CVE-2025-10310

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS5.7AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
•added 2025/10/15 9:15 a.m.•16 views

CVE-2025-10310

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS0.00357EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/15 8:25 a.m.•15 views

EUVD-2025-34567

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS5.7AI score0.00357EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/10/15 8:25 a.m.•6 views

CVE-2025-10310 Rich Snippet Site Report <= 2.0.0105 - Authenticated (Admin+) SQL Injection

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS5.7AI score0.00357EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/15 12:00 a.m.•3 views

CVE-2025-10310: Improper Neutralization of Special Elements used in an SQL Command

The Rich Snippet Site Report plugin for WordPress is vulnerable to SQL Injection via the 'last' parameter in all versions up to, and including, 2.0.0105 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible...

4.9CVSS5.7AI score0.00357EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/15 12:00 a.m.•3 views

PT-2025-42296

Name of the Vulnerable Software and Affected Versions Rich Snippet Site Report plugin for WordPress versions prior to 2.0.0106 Description The Rich Snippet Site Report plugin for WordPress is susceptible to SQL Injection due to inadequate input sanitization and SQL query preparation. Specifically...

4.9CVSS5.8AI score0.00357EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2025/09/23 6:00 a.m.•25 views

CVE-2025-39875 igb: Fix NULL pointer dereference in ethtool loopback test

In the Linux kernel, the following vulnerability has been resolved: igb: Fix NULL pointer dereference in ethtool loopback test The igb driver currently causes a NULL pointer dereference when executing the ethtool loopback test. This occurs because there is no associated qvector for the test ring...

0.00127EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/23 6:00 a.m.•15 views

CVE-2025-39875 igb: Fix NULL pointer dereference in ethtool loopback test

In the Linux kernel, the following vulnerability has been resolved: igb: Fix NULL pointer dereference in ethtool loopback test The igb driver currently causes a NULL pointer dereference when executing the ethtool loopback test. This occurs because there is no associated qvector for the test ring...

5.5CVSS6.1AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/07 12:00 a.m.•5 views

CVE-2025-3336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/membersave.php. The manipulation of the argument last leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7AI score0.00455EPSS
SaveExploits1References1
Rows per page
Query Builder