Lucene search
+L

7291 matches found

OSV
OSV
added 2025/03/27 5:15 p.m.6 views

DEBIAN-CVE-2023-53019

In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what may result in an out-of-bounds access to array mdiomap. One existing case is stmmacinitphy that may pass -1 as addr. Therefore valida...

7.8CVSS5.5AI score0.00198EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/27 3:15 p.m.16 views

UBUNTU-CVE-2025-21872

In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokvar table, we remap the entire table on each iteration of the loop, adding space as we discover new entries. If the table grows over a...

5.5CVSS6.2AI score0.00202EPSS
SaveExploits0References25
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.8 views

The vulnerability of the sock_map component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the sockhashfree function in the sockmap component of the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00231EPSS
SaveExploits0References19Affected Software9
NVD
NVD
added 2025/03/26 3:15 p.m.14 views

CVE-2025-23466

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS0.00357EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/26 2:27 p.m.14 views

CVE-2025-30588

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

7.1CVSS7.2AI score0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/26 2:24 p.m.6 views

CVE-2025-23466 WordPress Site Editor Google Map plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS7.2AI score0.00357EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/26 2:24 p.m.18 views

CVE-2025-23466 WordPress Site Editor Google Map plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpsiteeditor Site Editor Google Map site-editor-google-map allows Reflected XSS.This issue affects Site Editor Google Map: from n/a through = 1.0.1...

7.1CVSS0.00357EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/26 2:24 p.m.60 views

CVE-2025-23466

CVE-2025-23466 concerns the WordPress plugin Site Editor Google Map (Site Editor Google Map) and is a Reflected XSS vulnerability in the web page generation input handling. Affected range: plugin versions from n/a through 1.0.1. The NVD/Red Hat entries describe this as an improper neutralization ...

7.1CVSS7.2AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/26 10:15 a.m.9 views

CVE-2025-1440

The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aipmapurlcallback function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the...

5.3CVSS7.3AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2025/03/25 9:15 p.m.6 views

ALPINE-CVE-2025-27833

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs for a long TTF font name to pdf/pdffmap.c...

7.8CVSS7.4AI score0.00221EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/25 7:16 a.m.7 views

Malicious code in @sf-intl-map/pc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a2d90c24241bf2e76297e783ea1e7b7672cae9934a46ce92fc661a72786973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
NVD
NVD
added 2025/03/24 2:15 p.m.23 views

CVE-2025-30588

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

7.1CVSS0.00175EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/24 1:47 p.m.10 views

CVE-2025-30588 WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

7.1CVSS7.3AI score0.00175EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/24 1:47 p.m.62 views

CVE-2025-30588

CVE-2025-30588 — WordPress Map Contact: CSRF leads to Stored XSS in Map Contact plugin (affected:

7.1CVSS7.2AI score0.00175EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/24 1:47 p.m.36 views

CVE-2025-30588 WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ryanxantoo Map Contact map-contact allows Stored XSS.This issue affects Map Contact: from n/a through = 3.0.4...

7.1CVSS0.00175EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/03/24 1:33 p.m.6 views

WordPress Map Contact plugin <= 3.0.4 - CSRF to Stored XSS Vulnerability

CSRF to Stored XSS Vulnerability discovered by Abdi Pranata in WordPress Plugin Map Contact versions = 3.0.4...

7.1CVSS6.1AI score0.00175EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/03/24 12:00 a.m.10 views

WordPress plugin Map Contact 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS7.9AI score0.00175EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/21 12:00 a.m.10 views

The vulnerability of the arena_map_mem_usage() function in the kernel/bpf/arena.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arenamapmemusage function in the kernel/bpf/arena.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.3AI score0.00221EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/19 12:00 a.m.10 views

The vulnerability of the raid_map() function in the drivers/md/dm-raid.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the raidmap function in the drivers/md/dm-raid.c module of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.7AI score0.00174EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/19 12:00 a.m.18 views

The vulnerability of the nft_mapelem_deactivate() function in the net/netfilter/nf_tables_api.c module of the netfilter component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftmapelemdeactivate function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.2AI score0.00272EPSS
SaveExploits0References15Affected Software2
Rows per page
Query Builder