6373 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the failure of deviceregister to free an allocated device name when it fails, which could lead to a memory...
PT-2025-53028
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a resource leak within the regulator register function. During fault injection testing, resource leak reports were observed, specifically related to unreference...
PT-2025-52972
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the net/mlx5 component, specifically in the mlx5 devcom register device function. A use-after-free condition can occur if devcom allocation fails,...
PT-2025-53138
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the nsim bus dev new function within the netdevsim module of the Linux kernel. If device register fails during the execution of this function, the dev reference i...
PT-2025-53017
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the visconti register pll function within the clock clk subsystem of the Linux kernel. Specifically, memory allocated for pll-rate table using kmemdup is not free...
EUVD-2025-204796
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'registerform' and 'restrict' shortcodes in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping on user supplied attributes...
CVE-2025-14000 Membership Plugin – Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'registerform' and 'restrict' shortcodes in all versions up to, and including, 3.2.15 due to insufficient input sanitization and output escaping on user supplied attributes...
Exploit for CVE-2025-14440
CVE-2025-14440 JAY Login & Register = 2.4.01 - Authent...
CVE-2025-47323 Integer Overflow or Wraparound in Audio
Memory corruption while routing GPR packets between user and root when handling large data packet...
CVE-2025-47323
CVE-2025-47323 describes memory corruption when routing GPR packets between user and root space, in Qualcomm embedded platform firmware. Red Hat, NVD, CVE List and vuln enrichment entries all cite memory corruption on handling large data packets as the issue, with several sources also noting a re...
CVE-2025-65581
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
CVE-2025-12809
The Dokan Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the /dokan/v1/wholesale/register REST API endpoint in all versions up to, and including, 4.1.3. This makes it possible for unauthenticated attackers to enumerate users and retrieve...
PT-2026-2554
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to the handling of delayed work items within the ALPS touchpad driver. Specifically, a use-after-free condition can occur during device detachme...
Oracle Linux 7 : kernel (ELSA-2025-21063)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21063 advisory. - HID: core: fix shift-out-of-bounds in hidreportrawevent CVE-2022-48978 Orabug: 38644370 - crypto: seqiv - Handle EBUSY correctly CVE-2023-53373...
Open Redirect
Overview Volo.Abp.Account.Web is a part of the ABP Framework. Affected versions of this package are vulnerable to Open Redirect due to improper validation of the returnUrl parameter in the register function. An attacker can redirect users to arbitrary external domains by supplying a crafted URL...
GHSA-VFM5-CR22-JG3M ABP Account Module has an Open Redirect through Improper validation in its register function
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
ABP Account Module has an Open Redirect through Improper validation in its register function
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
CVE-2025-65581
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework = 5.1.0 and 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains...
WordPress JAY Login & Register plugin <= 2.4.01 - Authentication Bypass via Cookie vulnerability
Authentication Bypass via Cookie vulnerability discovered by kr0d in WordPress Plugin JAY Login & Register versions = 2.4.01...
UBUNTU-CVE-2025-68187
In the Linux kernel, the following vulnerability has been resolved: net: mdio: Check regmap pointer returned by devicenodetoregmap The call to devicenodetoregmap in airohamdioprobe can return an ERRPTR if regmap initialization fails. Currently, the driver stores the pointer without validation,...