CVE-2025-68960

CVE-2025-68960 describes a multi-thread race condition in the video framework module of Huawei HarmonyOS. Affected component: the Video Framework module within HarmonyOS; root cause: concurrent thread contention leading to a race condition. Impact: exploitation may affect availability. Public det...

CVE-2025-68960

Multi-thread race condition vulnerability in the video framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68958

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68958

CVE-2025-68958 is described across connected sources as a multi-thread race condition in the card framework module, with potential impact to availability. Affected platforms include Huawei HarmonyOS (per CNNVD and Huawei bulletins) and related ecosystem entries. The CVSS vectors vary: NVD lists C...

CVE-2025-68958

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68957

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68956

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68956

CVE-2025-68956 corresponds to a multi-thread race condition in the Card Framework module of Huawei HarmonyOS. Multiple connected sources (Red Hat, CIRCL, CNNVD, CVE databases, PT-Security) describe a vulnerability that could affect system availability. The Huawei/NVD entries indicate a local atta...

CVE-2025-68955

Multi-thread race condition vulnerability in the card framework module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2025-68955

CVE-2025-68955 relates to a multi-thread race condition in the Card Framework module. Connected sources reference Huawei HarmonyOS (v6.0.0) as affected, describing a contention condition that could affect usability/availability. The exact vulnerable components and fixed versions are not consisten...

SUSE CVE-2025-71101

In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hppopulateelementsfrompackage functions in the hp-bioscfg driver contain out-of-bounds array access vulnerabilities. These functions parse ACPI...

CVE-2026-0734: Improper Neutralization of Input During Web Page Generation

The WP Allowed Hosts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'allowed-hosts' parameter in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-0680: Improper Neutralization of Input During Web Page Generation

The Real Post Slider Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 2.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-15486: Improper Neutralization of Input During Web Page Generation

The Kunze Law plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's shortcode in all versions up to, and including, 2.1 due to the plugin fetching HTML content from a remote server and injecting it into pages without any sanitization or escaping. This makes it possible fo...

CVE-2025-15021: Improper Neutralization of Input During Web Page Generation

The Gotham Block Extra Light plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2025-14379: Improper Neutralization of Input During Web Page Generation

The Testimonials Creator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject...

CVE-2025-68968: Double Free

Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...

CVE-2025-14725: Improper Neutralization of Input During Web Page Generation

The Internal Link Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

PT-2026-2566

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-2573

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68968 Description A double free issue exists in the multi-mode input module. Successful exploitation of this issue may affect the input function. Recommendations At the moment, there is no information about a newer versi...