PT-2025-16743

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the l3mdev l3 rcv function. This issue occurs when deleting an l3s ipvlan, which can cause a nul...

AquilaCMS 路径遍历漏洞

AquilaCMS is a complete multipurpose open source CMS from the AquilaCMS team. A security vulnerability exists in AquilaCMS that stems from the OSAL module being susceptible to path traversal attacks...

PT-2025-12827

Name of the Vulnerable Software and Affected Versions NASA cFS Core Flight System Aquila affected versions not specified Description The issue concerns path traversal in the OSAL module, which allows the override of any arbitrary file on the system. Recommendations At the moment, there is no...

CVE-2025-30532

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.This issue affects Weather Layer: from n/a through = 4.2.1...

CVE-2025-30532 WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer weather-layer allows Stored XSS.This issue affects Weather Layer: from n/a through = 4.2.1...

CVE-2025-30532

CVE-2025-30532 describes a Stored XSS in Weather Layer (WordPress plugin). In Weather Layer: from n/a through 4.2.1, the issue stems from improper input neutralization during web page generation, enabling stored XSS. The provided metrics classify the exploit as Cross-site Scripting with Low/Moder...

CVE-2025-30532 WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MorganF Weather Layer allows Stored XSS. This issue affects Weather Layer: from n/a through 4.2.1...

WordPress Weather Layer plugin <= 4.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Weather Layer versions = 4.2.1...

WordPress plugin Weather Layer 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

The vulnerability of the Application-Layer Protocol Negotiation (ALPN) component in Mozilla Firefox, Firefox ESR, and email clients Thunderbird, Thunderbird ESR, allows a hacker to redirect users to any desired URL address.

The vulnerability of the Application-Layer Protocol Negotiation ALPN component in Mozilla Firefox, Firefox ESR, and Thunderbird email clients, including Thunderbird ESR, is related to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirec...

The vulnerability of the Service Layer component of the SAP Business One resource management system allows a malicious actor to enhance their privileges and gain access to read, modify, and/or add data.

The vulnerability of the Service Layer component of the SAP Business One resource management system is related to improper session management. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain access to read, modify, and/or add data...

The vulnerability of the tusb1210_remove_charger_detect() function in the drivers/phy/ti/phy-tusb1210.c file of the Linux kernel’s PHY driver allows a hacker to cause a service failure.

The vulnerability of the tusb1210removechargerdetect function in the drivers/phy/ti/phy-tusb1210.c file of the Linux kernel’s PHY driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

Vulnerabilities fixed in IBM AIX

IBM has fixed vulnerabilities in IBM AIX Specifically for versions 7.2 and 7.3. The vulnerabilities are in the NIM master service and the nimsh service's SSL/TLS protection mechanisms in IBM AIX versions 7.2 and 7.3. These vulnerabilities can be exploited by remote malicious actors to execute...

CVE-2024-11301

CVE-2024-11301 affects lunary-ai/lunary prior to 1.6.3. The issue is the absence of a unique constraint on the combination of projectId and slug when creating evaluators, allowing an attacker to overwrite an existing evaluator by submitting a POST with the same slug. This leads to data integrity ...

The vulnerability of the at8031_parse_dt() function in the drivers/net/phy/at803x.c module of the Linux physical layer network support driver allows a attacker to cause a service failure.

The vulnerability of the at8031parsedt function in the drivers/net/phy/at803x.c module of the Linux PHY driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

IBM AIX 安全漏洞

IBM AIX is an open standards-based UNIX operating system developed for the IBM Power architecture by International Business Machines IBM. A security vulnerability exists in IBM AIX versions 7.2 and 7.3, which stems from improper control of the nimsh service SSL/TLS protection mechanism process an...

CVE-2025-20142

A vulnerability in the IPv4 access control list ACL feature and quality of service QoS policy feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers, ASR 9902 Compact High-Performance Routers, and ASR 9903 Compact High-Performance Routers could allow an...

CVE-2025-28879

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in aumsrini Bee Layer Slider bee-layer-slider allows Stored XSS.This issue affects Bee Layer Slider: from n/a through = 1.1...

USN-7328-3 linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...

USN-7328-2: Linux kernel vulnerabilities

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service system crash or possibly execute arbitrary code...