20211 matches found
WordPress plugin Amazon affiliate lite Plugin 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libpng (UTSA-2025-991303)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991303 advisory. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to befor...
PT-2026-38956
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the dm driver, the failure to implement its own timeout handler while relying on slave devices leads to an issue where requests are leaked and never completed if an io-timeout-fail...
WordPress plugin Attachments Handler 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
EUVD-2025-204470
The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's babe-search-form shortcode in all versions up to, and including, 1.8.14 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
Summary On Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a inkscape.bat file that defines a Windows batch script, capable of arbitrary code execution. When a user runs jupyter nbconvert --to pdf on a...
EUVD-2025-203957
nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows...
CVE-2025-53000
A flaw was found in nbconvert, specifically in the jupyter nbconvert tool on Windows. A third party can exploit this vulnerability by creating a malicious inkscape.bat file in a directory. When a user then converts a Jupyter notebook containing SVG output to a PDF from this directory, the malicio...
BIT-GITLAB-2025-8405 Improper Encoding or Escaping of Output in GitLab
GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to perform unauthorized actions on behalf of other users by injecting malicious HTML into vulnerability...
CVE-2025-47322
Memory corruption while handling IOCTL calls to set mode...
EUVD-2025-204023
Memory Corruption when processing IOCTLs for JPEG data without verification...
CVE-2025-47387
CVE-2025-47387 relates to memory corruption when processing unverified JPEG IOCTL data in Qualcomm embedded platform firmware. The issue affects the IOCTL path handling JPEG data, caused by unverified input leading to memory corruption with potential for impact on confidentiality, integrity, and ...
CVE-2025-47322
CVE-2025-47322 involves a memory corruption (use-after-free) flaw in IOCTL handling to set mode in Qualcomm embedded platform firmware/ MSM kernel components. Affected: Qualcomm embedded platform firmware; root cause: use-after-free leading to memory corruption. Impact: potential arbitrary code e...
CVE-2025-47322 Use After Free in Automotive Linux OS
Memory corruption while handling IOCTL calls to set mode...
EUVD-2025-204029
Memory corruption while handling IOCTL calls to set mode...
CVE-2025-67790
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. An unprivileged user could cause occasionally a Blue Screen Of Death BSOD on Windows computers by using an IOCTL and an unterminated string...
CVE-2025-63757
Integer overflow vulnerability in the yuv2ya16Xctemplate function in libswscale/output.c in FFmpeg 8.0...
MSM和Qualcomm platform-kernel 资源管理错误漏洞
MSM is a sample management tool from the individual developer Holger Graef in France. Enables researchers to track their samples from any PC in the lab.Qualcomm platform-kernel is a Linux kernel codebase from Qualcomm, USA. A resource management error vulnerability exists in MSM and Qualcomm...
CVE-2025-63757
CVE-2025-63757 is an integer overflow in FFmpeg’s libswscale/output.c, specifically in yuv2ya16_X_c_template(). The issue affects FFmpeg 8.0 and can enable memory corruption leading to denial of service or arbitrary code execution. Connected advisories (Ubuntu, openSUSE/SUSE, Debian) group CVE-20...
