CVE-2025-28859

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice allows Cross Site Request Forgery. This issue affects Maintenance Notice: from n/a through 1.0.5...

CVE-2025-28859 WordPress Maintenance Notice plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in CodeVibrant Maintenance Notice maintenance-notice allows Cross Site Request Forgery.This issue affects Maintenance Notice: from n/a through = 1.0.6...

CVE-2025-28859

CVE-2025-28859 is a CSRF vulnerability in the WordPress Maintenance Notice plugin (≤ 1.0.5). Exploitation could allow unauthorized actions on behalf of an authenticated user. Redhat/NVD entries and Patchstack indicate the fix was released in version 1.0.6; upgrading to 1.0.6 or later is the recom...

WordPress plugin Maintenance Notice 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers. A cross-site request forgery...

The vulnerability of the integrated controller, Satellite Management Controller (SMC), in AMD MI300X microprocessor-based software allows a intruder to execute arbitrary commands and cause malfunctions during maintenance.

The vulnerability of the integrated controller, Satellite Management Controller SMC, in the microprogrammed software of AMD MI300X processors is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands and cause...

The vulnerability of the integrated controller, Satellite Management Controller (SMC), in AMD MI300X microprocessor-based software allows a intruder to execute arbitrary commands and cause malfunctions during maintenance.

The vulnerability of the integrated controller, Satellite Management Controller SMC, in the microprogrammed software of AMD MI300X processors is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary commands and cause...

PT-2025-10715 · Libzvbi +5 · Libzvbi +5

Name of the Vulnerable Software and Affected Versions: libzvbi versions 0.2.43 and earlier Description: A critical issue has been found in libzvbi, affecting the vbi capture sim load caption function in the src/io-sim.c file. This issue leads to an integer overflow and can be initiated remotely...

humantime is unmaintained

Latest humantime crates.io release is four years old and GitHub repository has not seen commits in four years. Question about maintenance status has not gotten any reaction from maintainer: https://github.com/tailhook/humantime/issues/31 Update: maintained again The maintainer has responded and...

CVE-2025-1540

An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."...

CVE-2025-20909

Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2024-50129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: pse-pd: Fix out of bound for loop Adjust the loop limit to prevent out-of-bounds access...

The vulnerability of UEFI microprogramming systems of Intel processors allows a hacker to trigger a malfunction during maintenance.

The vulnerability of UEFI microprogramming systems of Intel processors is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a system failure...

CVE-2025-27332

Cross-Site Request Forgery CSRF vulnerability in gmnazmul Smart Maintenance & Countdown smart-maintenance-countdown allows Stored XSS.This issue affects Smart Maintenance & Countdown: from n/a through = 1.2...

CVE-2022-49549

In the Linux kernel, the following vulnerability has been resolved: x86/MCE/AMD: Fix memory leak when thresholdcreatebank fails In mcethresholdcreatedevice, if thresholdcreatebank fails, the previously allocated threshold banks array @bp will be leaked because the call to mcethresholdremovedevice...

CVE-2025-27332

Cross-Site Request Forgery CSRF vulnerability in gmnazmul Smart Maintenance & Countdown smart-maintenance-countdown allows Stored XSS.This issue affects Smart Maintenance & Countdown: from n/a through = 1.2...

WordPress Smart Maintenance & Countdown Plugin <= 1.2 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Smart Maintenance & Countdown versions = 1.2...

CVE-2025-27332 WordPress Smart Maintenance & Countdown Plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in gmnazmul Smart Maintenance & Countdown smart-maintenance-countdown allows Stored XSS.This issue affects Smart Maintenance & Countdown: from n/a through = 1.2...

CVE-2025-27332

CVE-2025-27332 : WordPress Smart Maintenance & Countdown plugin is reported to have a CSRF vulnerability that enables stored XSS in versions up to 1.2. The available sources confirm the issue but do not specify a fixed version. Exploitation details are not provided in the documents. Recommended a...

WordPress plugin Smart Maintenance & Countdown 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

*ring* is unmaintained

The author has announced an indefinite hiatus in its development, noting that any reported security vulnerabilities may go unaddressed for prolonged periods of time. Update: security maintenance only After this advisory was published, the author graciously agreed to give access to the rustls team...