CVE-2022-49533

CVE-2022-49533 relates to the Linux kernel ath11k driver, where a buffer overflow could occur while copying SSIDs into the scan_req_params structure during hardware scanning. The root cause is the mismatch between the number of SSIDs supported (16) and the structure’s capacity (10), potentially a...

CVE-2022-49450 rxrpc: Fix listen() setting the bar too high for the prealloc rings

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix listen setting the bar too high for the prealloc rings AFRXRPC's listen handler lets you set the backlog up to 32 if you bump up the sysctl, but whilst the preallocation circular buffers have 32 slots in them, one of...

CVE-2022-49292

CVE-2022-49292 is tied to the Linux kernel ALSA oss PCM buffer allocation overflow. The vulnerability occurs when snd_pcm_plug_alloc() may allocate an oversized temporary buffer during data conversion if hardware parameters allow larger-than-expected period/buffer sizes, risking an INT_MAX overfl...

CVE-2022-49292 ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

CVE-2022-49292

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

CVE-2022-49292 ALSA: oss: Fix PCM OSS buffer allocation overflow

In the Linux kernel, the following vulnerability has been resolved: ALSA: oss: Fix PCM OSS buffer allocation overflow We've got syzbot reports hitting INTMAX overflow at vmalloc allocation that is called from sndpcmplugalloc. Although we apply the restrictions to input parameters, it's based only...

CVE-2022-49101

CVE-2022-49101 entry is rejected by the CVE Numbering Authority and does not represent an active vulnerability.

CVE-2022-49075 btrfs: fix qgroup reserve overflow the qgroup limit

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in qgroupreservedata to record how many bytes we set for EXTENTQGROUPRESERVED state. Currently the byteschanged is set as "unsigned int", and...

CVE-2022-49075 btrfs: fix qgroup reserve overflow the qgroup limit

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in qgroupreservedata to record how many bytes we set for EXTENTQGROUPRESERVED state. Currently the byteschanged is set as "unsigned int", and...

CVE-2022-49075

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix qgroup reserve overflow the qgroup limit We use extentchangeset-byteschanged in qgroupreservedata to record how many bytes we set for EXTENTQGROUPRESERVED state. Currently the byteschanged is set as "unsigned int", and...

PT-2025-8384 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A bug in the Linux kernel's AF RXRPC listen handler allows the backlog to be set too high, causing an oops when the socket is closed. This happens because the preallocation circular...

CVE-2025-26928

Missing Authorization vulnerability in Xfinitysoft Order Limit for WooCommerce wc-order-limit-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Limit for WooCommerce: from n/a through = 3.0.2...

CVE-2025-26991 WordPress WPPizza plugin <= 3.19.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ollybach WPPizza wppizza allows Reflected XSS.This issue affects WPPizza: from n/a through = 3.19.4...

CVE-2025-26928

CVE-2025-26928: Missing Authorization in Order Limit for WooCommerce (Order Limit for WooCommerce plugin) affects versions up to and including 3.0.2. Documented in Wordfence Intelligence, it is labeled as a Missing Authorization vulnerability; remediation is to apply the patch/upgrade that fixes ...

PT-2025-7851 · Woocommerce · Order Limit For Woocommerce

Name of the Vulnerable Software and Affected Versions: Order Limit for WooCommerce versions 3.0.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Order Limit for WooCommerce plugin, which allows exploitation due to incorrectly configured access contro...

WordPress plugin Order Limit for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2024-12916

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Agito Computer Life4All allows SQL Injection. This issue affects Life4All: before 10.01.2025...

CVE-2024-12916

CVE-2024-12916 concerns an SQL Injection in Agito Computer’s Life4All before 10.01.2025. Connected sources confirm the root cause is improper neutralization of special elements in SQL commands, affecting Life4All installations prior to the stated version. The CVSS metrics indicate high impact acr...

The vulnerability of the File.OpenText() function in the WhatsUp Gold network infrastructure monitoring system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the File.OpenText function in the WhatsUp Gold network infrastructure monitoring system is related to an incorrect limitation on the path name to the restricted directory when processing the xmlName parameter. Exploiting this vulnerability can allow a malicious actor to gain...