CVE-2023-53710

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix error code of return in mt7921acpiread Kernel NULL pointer dereference when ACPI SAR table isn't implemented well. Fix the error code of return to mark the ACPI SAR table as invalid. 5.077128 mt7921e...

CVE-2025-53057

creationtimestamp| type| source ---|---|--- 2025-10-22 07:09:13+00:00| seen| https://bsky.app/profile/DJGummikuh.mastodon.social.ap.brid.gy/post/3m3rbyutbpqy2 2025-12-02 08:27:09+00:00| seen| https://gist.github.com/Darkcrai86/c8342ad8565462e6c019609ac9d319bb 2026-01-09 13:55:20+00:00| seen|...

WordPress plugin WPComplete 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

WordPress plugin Reviews Widgets for Google & 45+ platforms by Repuso 安全漏洞

WordPress and WordPress plugin are products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin Reviews Widge...

CVE-2025-62587

Oracle VM VirtualBox (core) is affected by CVE-2025-62587 in versions 7.1.12 and 7.2.2. The vulnerability enables a high-privilege attacker with local logon to compromise Oracle VM VirtualBox, with potential impact extending to other products (scope change). CVSS 3.1 base score is 8.2, indicating...

CVE-2025-62290

...

CVE-2025-62289

...

CVE-2025-61885

...

CVE-2025-61757

...

CVE-2025-61758

...

EUVD-2025-35254

Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE component: Compiler. Supported versions that are affected are Oracle GraalVM for JDK: 17.0.16 and 21.0.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromi...

CVE-2025-61751

...

CVE-2025-53066

...

CVE-2025-53046

...

CVE-2025-50075

The CVE-2025-50075 entry affects Oracle Financial Services Revenue Management and Billing (component: Security Management System) within Oracle Financial Services Applications, for versions 2.9.0.0.0–7.2.0.0.0. The vulnerability can be exploited by a low-privileged attacker over HTTP with network...

GHSA-M895-2HJ3-8CG9 Shopware vulnerable to MediaVisibilityRestrictionSubscriber bypass when reading media entities by aggregating fields individually

In Shopware core and platform versions before 6.6.10.7 and 6.7.3.1, media visibility restrictions applied by MediaVisibilityRestrictionSubscriber are not enforced for aggregation API requests. Authorization filters are only injected during standard entity reads; aggregation queries can be...

CVE-2022-4981

A vulnerability was detected in DCMTK up to 3.6.7. The impacted element is the function DcmQueryRetrieveConfig::readPeerList of the file /dcmqrcnf.cc of the component dcmqrscp. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit is now publ...

astral-tokio-tar 安全漏洞

astral-tokio-tar is a Rust library open-sourced by Astral. A security vulnerability exists in astral-tokio-tar versions prior to 0.5.6, which stems from inconsistent boundary parsing and could result in the contents of an interpreted file being a legal tar header...

EUVD-2025-35010

A security flaw has been discovered in LogicalDOC Community Edition up to 9.2.1. This issue affects some unknown processing of the file /frontend.jsp of the component Add Contact Page. Performing manipulation of the argument First Name/Last Name/Company/Address/Phone/Mobile results in cross site...

CVE-2025-11857

The CVE-2025-11857 entry pertains to the XX2WP Integration Tools WordPress plugin. Affected versions are all up to and including 1.9.9, with a Stored Cross-Site Scripting (Stored XSS) flaw in the mxp_fb2wp_display_embed shortcode caused by improper sanitization of the post_id parameter. This allo...