Lucene search
+L

5820 matches found

CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•18 views

WordPress plugin Secure Copy Content Protection and Content Locking 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

5.3CVSS6AI score0.0032EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/12 12:00 a.m.•21 views

WordPress plugin Secure Copy Content Protection and Content Locking 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

4.3CVSS6.1AI score0.00164EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•3 views

CVE-2025-43510: Improper Locking

A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. A malicious application may cause unexpect...

7.8CVSS6.4AI score0.00355EPSS
SaveExploits2References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•7 views

CVE-2025-14442: Files or Directories Accessible to External Parties

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS5.8AI score0.0032EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/12 12:00 a.m.•7 views

CVE-2025-14159: Cross-Site Request Forgery (CSRF)

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.9.2. This is due to missing nonce validation on the 'ayssccpresultsexportfile' AJAX action. This makes it possible for unauthenticated...

4.3CVSS5.6AI score0.00164EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/12 12:00 a.m.•29 views

PT-2025-50926

The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to sensitive information exposure due to storage of exported CSV files in a publicly accessible directory with predictable filenames in all versions up to, and including, 4.9.2. This makes it possible for...

5.3CVSS5.7AI score0.0032EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/11 8:15 p.m.•22 views

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00078EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/11 7:35 p.m.•50 views

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00078EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/11 7:35 p.m.•9 views

CVE-2025-36919

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6AI score0.00078EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/11 7:35 p.m.•17 views

EUVD-2025-202863

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.4AI score0.00078EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/11 12:00 a.m.•21 views

PT-2025-50702

In aocc read of aoc channel dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.00078EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/12/10 8:34 a.m.•10 views

CVE-2022-50648

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix recursive locking directmutex in ftracemodifydirectcaller Naveen reported recursive locking of directmutex with sample ftrace-direct-modify.ko: 74.762406 WARNING: possible recursive locking detected 74.762887 6.0.0-rc...

5.5CVSS5.7AI score0.00185EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/12/10 12:38 a.m.•32 views

SUSE CVE-2022-50648

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix recursive locking directmutex in ftracemodifydirectcaller Naveen reported recursive locking of directmutex with sample ftrace-direct-modify.ko: 74.762406 WARNING: possible recursive locking detected 74.762887 6.0.0-rc...

6.3AI score0.00185EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/12/10 12:36 a.m.•18 views

SUSE CVE-2023-53777

In the Linux kernel, the following vulnerability has been resolved: erofs: kill hooked chains to avoid loops on deduplicated compressed images After heavily stressing EROFS with several images which include a hand-crafted image of repeated patterns for more than 46 days, I found two chains could ...

4.7CVSS5.7AI score0.00199EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2025/12/10 12:35 a.m.•13 views

SUSE CVE-2023-53836

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix skb refcnt race after locking changes There is a race where skb's from the skpsockbacklog can be referenced after userspace side has already skbconsumed the skbuff and its refcnt dropped to zer0 causing use afte...

5.5CVSS6.1AI score0.00189EPSS
SaveExploits0References17
SUSE CVE
SUSE CVE
•added 2025/12/10 12:34 a.m.•11 views

SUSE CVE-2023-53839

In the Linux kernel, the following vulnerability has been resolved: dccp: fix data-race around dp-dccpsmsscache dccpsendmsg reads dp-dccpsmsscache before locking the socket. Same thing in dodccpgetsockopt. Add READONCE/WRITEONCE annotations, and change dccpsendmsg to check again dccpsmsscache aft...

5.5CVSS6.5AI score0.00257EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•23 views

PT-2026-37483

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lack of mutual exclusion when manipulating the mfd of node list list in the kernel can lead to potential system crashes. This occurs because accessing or modifying the list without...

5.5CVSS5.5AI score0.00162EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•24 views

PT-2026-43771

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.18.0-rc3 Description An issue in the Enhanced Error Handling EEH driver for powerpc leads to recursive locking. The function eeh handle normal event acquires the pci lock rescan remove lock before calling eeh pe bus get,...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/12/10 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2023-53809

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - l2tp: Avoid possible recursive deadlock in l2tptunnelregister When a file descriptor of pppol2tp socket is passed as file descriptor of UDP socket, a recursive...

5.8AI score0.00186EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/10 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2022-50648

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ftrace: Fix recursive locking directmutex in ftracemodifydirectcaller Naveen reported recursive locking of directmutex with sample ftrace-direct-modify.ko:...

5.4AI score0.00185EPSS
SaveExploits0References3
Rows per page
Query Builder