CVE-2025-60142

CVE-2025-60142 – WordPress: Simple Meta Tags plugin (versions up to 1.5) exposes a DOM-based XSS due to improper neutralization of input during web page generation. The vulnerability is classified as an authenticated issue (Contributor+ required) with stored XSS. The linked docs indicate the vuln...

CVE-2025-60142 WordPress Simple Meta Tags Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...

CVE-2025-60142 WordPress Simple Meta Tags Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DaganLev Simple Meta Tags simple-meta-tags allows DOM-Based XSS.This issue affects Simple Meta Tags: from n/a through = 1.5...

PT-2025-39666

Name of the Vulnerable Software and Affected Versions Rancher Manager versions prior to 2.9.12 Rancher Manager versions prior to 2.10.10 Rancher Manager versions prior to 2.11.6 Rancher Manager versions prior to 2.12.2 Description A flaw exists in Rancher Manager that allows sensitive information...

WordPress plugin Simple Meta Tags 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripti...

PT-2025-39585

Name of the Vulnerable Software and Affected Versions DaganLev Simple Meta Tags versions through 1.5 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for potential execution of...

Security update for nvidia-open-driver-G06-signed

This update for nvidia-open-driver-G06-signed fixes the following issues: Update non-CUDA variant to 580.82.07 bsc1249235 Update non-CUDA variant to 580.76.05 bsc1247907 get rid of rule of older KMPs not to load nvidiadrm module, which are still installed in parallel and therefore still active...

CLSA-2025-1758293394 postgresql: Fix of 2 CVEs

CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps pgdump/pgrestore/pgdumpall, psql restricted mode - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps...

[SECURITY] Fedora 43 Update: kernel-6.17.0-0.rc6.49.fc43

The kernel meta package...

Linux Distros Unpatched Vulnerability : CVE-2023-53214

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential memory corruption in updateiostatlatency Add iotype sanity che...

CVE-2023-53214 f2fs: fix to avoid potential memory corruption in __update_iostat_latency()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential memory corruption in updateiostatlatency Add iotype sanity check to avoid potential memory corruption. This is to fix the compile error below: fs/f2fs/iostat.c:231 updateiostatlatency error: buffer...

CVE-2023-53214 f2fs: fix to avoid potential memory corruption in __update_iostat_latency()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential memory corruption in updateiostatlatency Add iotype sanity check to avoid potential memory corruption. This is to fix the compile error below: fs/f2fs/iostat.c:231 updateiostatlatency error: buffer...

PT-2025-37655

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's f2fs implementation within the update iostat latency function. A mixup between META FLUSH and NR PAGE TYPE can lead to potential memory corruption...

[SECURITY] Fedora 41 Update: kernel-6.16.7-100.fc41

The kernel meta package...

gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops

...

OESA-2025-2240 libpq security update

PostgreSQL is a powerful, open source object-relational database system that uses and extends the SQL language combined with many features that safely store and scale the most complicated data workloads. This package provides the essential shared library for any PostgreSQL client program or...

CVE-2025-6189

The Duplicate Page and Post plugin for WordPress is vulnerable to time-based SQL Injection via the ‘metakey’ parameter in all versions up to, and including, 2.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes i...

[SECURITY] Fedora 42 Update: kernel-6.16.7-200.fc42

The kernel meta package...

WordPress Duplicate Page and Post plugin SQL Injection Vulnerability

WordPress Duplicate Page and Post plugin is a plugin for quickly duplicating pages or posts, supporting one-click cloning of existing content and saving it to draft, private or public status, for users who need to batch process website content. WordPress Duplicate Page and Post plugin suffers fro...

DEBIAN-CVE-2025-39753

In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migratefolio in gfs2rgrp,metaaops Clears up the warning added in 7ee3647243e5 "migrate: Remove call to -writepage" that occurs in various xfstests, causing "something found in dmesg" failures. 341.136573 gfs2metaaops...