3560 matches found
CVE-2020-36848
The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.14.9 via the env-info.php and restore-info.json files. This makes it possible for unauthenticated attackers to...
The vulnerability of the Live-Restore parameter in software for remote IT support and monitoring of Dell Secure Connect Gateway (SCG) allows a hacker to circumvent existing security restrictions.
The vulnerability of the Live-Restore parameter in software for remote IT support and monitoring of Dell Secure Connect Gateway SCG is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions...
June 10, 2025—KB5060842 (OS Build 26100.4349)
None None...
CVE-2025-6800
Marvell QConvergeConsole restoreESwitchConfig Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Marvell QConvergeConsole. Authentication is not required to exploit this vulnerability...
DEBIAN-CVE-2025-38214
In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, later it may lead to a null-ptr dereference in fbvideomodetovar, as the fbinfo is registere...
CVE-2025-38233 powerpc64/ftrace: fix clobbered r15 during livepatching
In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...
CVE-2025-38233
The CVE 2025-38233 entry describes a Linux kernel PPC64 ftrace livepatching issue where r15 is clobbered and not restored in the livepatch sequence, causing kernel faults (example trace shows an oops and bad memory access). Connected docs confirm concrete fixes: restore r15 unconditionally in the...
Security Bulletin: Vulnerabilities in Jinja , cryptography & OpenSSL can affect IBM Storage Protect Plus File Systems Agent Backup and Restore
Summary IBM Storage Protect Plus File Systems Agent Backup and Restore can be affected by vulnerabilities in Jinja & cryptography which includes execution of untrusted templates, man-in-middle attacks & a denial of service, as described by the CVEs in the "Vulnerability Details" section. These...
CVE-2022-49997 net: lantiq_xrx200: restore buffer if memory allocation failed
In the Linux kernel, the following vulnerability has been resolved: net: lantiqxrx200: restore buffer if memory allocation failed In a situation where memory allocation fails, an invalid buffer address is stored. When this descriptor is used again, the system panics in the buildskb function when...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerabilities have been resolved: Net: Ethernet: mtk-star-emac: fixed spinlock recursion issues during rx/tx polls. Use spinlockirqsave and spinunlockirqrestore instead of spinlock and spinunlock in the mtk-star-emac driver to avoid spinlock recursion issues...
PT-2025-49373
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s handling of page faults within secret memory files created using memfd secret2. Concurrent page faults in the same page by multiple tasks can lead to ...
kernel: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb-protocol,data,macheader for outer header in nshgsosegment. syzbot triggered various splats see 0 and links by a crafted GSO packet of VIRTIONETHDRGSOUDP layering the following protocols: ETHP8021AD + ETHPNSH +...
June 10, 2025—Hotpatch KB5060841 (OS Build 26100.4270)
None None...
The vulnerability of the virtio-blk component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the virtio-blk component in the Linux operating system’s kernel is related to insufficient validation of input data in the functions virtblkremove and virtblkrestore in drivers/block/virtioblk.c. Exploiting this vulnerability could allow an attacker to trigger a service failu...
PT-2025-24014 · WordPress · The Art Theme
Name of the Vulnerable Software and Affected Versions: The Art Theme for WordPress versions up to, and including, 3.12.2.3 Description: The issue is related to unauthorized access due to a missing capability check on the 'arttheme theme option restore' AJAX function. This allows authenticated...
Malicious code in ideals-theming (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b76e002c6ea57373962d0b94a4186cd64f4de50ff591d923b550f96f25aa7fa Any computer that has this package installed or running should be considered...
CVE-2024-43269
Cross-Site Request Forgery CSRF vulnerability in WPBackItUp Backup and Restore WordPress.This issue affects Backup and Restore WordPress: from n/a through 1.50...
CVE-2024-51252
In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the restore function...
CVE-2023-4637
The WPvivid plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the restore and getrestoreprogress function in versions up to, and including, 0.9.94. This makes it possible for unauthenticated attackers to invoke these functions and obtain full...