2694 matches found
Linux Distros Unpatched Vulnerability : CVE-2018-6077
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak...
CVE-2025-8622
The Flexible Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flexible Maps shortcode in all versions up to, and including, 1.18.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-8622
CVE-2025-8622 concerns the WordPress plugin Flexible Map (wp-flexible-map). The vulnerability is a Stored Cross-Site Scripting flaw in the plugin’s Flexible Maps shortcode, arising from insufficient input sanitization and output escaping on user-supplied attributes. Affected versions are all up t...
CVE-2025-8622 Flexible Maps <= 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcode
The Flexible Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flexible Maps shortcode in all versions up to, and including, 1.18.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-8622 Flexible Maps <= 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flexible Maps Shortcode
The Flexible Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Flexible Maps shortcode in all versions up to, and including, 1.18.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
CVE-2025-38547
In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20xadc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning. Add the missing sentinel entry...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-097)
The version of kernel installed on the remote host is prior to 5.10.238-234.956. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-097 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix -anonvma race...
CVE-2025-38547
In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20xadc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning. Add the missing sentinel entry...
CVE-2025-38547 iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20xadc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning. Add the missing sentinel entry...
CVE-2025-38547
In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20xadc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning. Add the missing sentinel entry...
CVE-2025-38547
CVE-2025-38547 affects the Linux kernel IIO ADC driver for AXP717 (iio: adc: axp20x_adc). The issue is a missing sentinel entry in the AXP717 ADC channel maps, which can trigger a KASAN warning. The fix adds the missing sentinel entry to the channel maps. No exploitation details are provided in t...
CVE-2025-38502 bpf: Fix oob access in cgroup local storage
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix oob access in cgroup local storage Lonial reported that an out-of-bounds access in cgroup local storage can be crafted via tail calls. Given two programs each utilizing a cgroup local storage with a different value size,...
PT-2025-33594
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the AXP717 ADC channel maps where a sentinel entry is missing. This causes a KASAN warning. Adding the missing sentinel entry resolves the issue...
MAL-2025-17380 Malicious code in comerge-ns-google-maps (npm)
The package comerge-ns-google-maps was found to contain malicious code...
Malicious code in comerge-ns-google-maps (npm)
The package comerge-ns-google-maps was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2023-29535
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potential...
WordPress esri-map-view cross-site scripting vulnerability
WordPress esri-map-view is used to embed Esri/ArcGIS maps or scenes in websites. The plugin realizes map display through short code, supports selecting base map, setting initial view angle, adding custom layers, pop-up information window and other functions, and can embed preconfigured web maps o...
Linux Distros Unpatched Vulnerability : CVE-2022-50160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with...
Linux Distros Unpatched Vulnerability : CVE-2022-48845
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: MIPS: smp: fill in sibling and core maps earlier After enabling CONFIGSCHEDCORE landed durin...
Linux Distros Unpatched Vulnerability : CVE-2022-34674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where a helper function maps more physical pages than were...