13090 matches found
CVE-2024-57911 iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer
In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iiosimplydummybuffer: fix information leak in triggered buffer The 'data' array is allocated via kmalloc and it is used to push data to user space from a triggered buffer, but it does not set values for inactive...
CGA-7QFC-JC9P-WV4Q
Bulletin has no description...
CVE-2021-0447
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CGA-376V-X6MM-4383
Bulletin has no description...
BELL-CVE-2024-57889
Bulletin has no description...
CVE-2024-57030
Wegia 3.2.0 is vulnerable to Cross Site Scripting XSS in /geral/documentosfuncionario.php via the id parameter...
GO-2025-3393 Mattermost Incorrect Type Conversion or Cast in github.com/mattermost/mattermost-server
Mattermost Incorrect Type Conversion or Cast in github.com/mattermost/mattermost-server...
CVE-2025-23430
CVE-2025-23430 is a CSRF and XSS issue in Mass Custom Fields Manager for WordPress. Red Hat (RH:CVE-2025-23430) and Red Hat/Wordfence references confirm a CSRF-to-Reflected XSS condition affecting Mass Custom Fields Manager versions up to 1.5. The CVSS 3.1 base score is 7.1 (High) with network ac...
HAL Console has a Cross Site Scripting (XSS) vulnerability of user input
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...
CVE-2024-57775
JFinalOA before v2025.01.01 was discovered to contain a SQL injection vulnerability via the component getWorkFlowHis?insid...
CGA-PH6G-3PH2-3H3Q
Bulletin has no description...
BELL-CVE-2024-57895
Bulletin has no description...
BELL-CVE-2024-57882
Bulletin has no description...
BELL-CVE-2024-57885
Bulletin has no description...
BELL-CVE-2024-57884
Bulletin has no description...
OPENSUSE-SU-2025:14655-1 hplip-3.24.4-4.1 on GA media
These are all security issues fixed in the hplip-3.24.4-4.1 package on the GA media of openSUSE Tumbleweed...
GO-2025-3391 Rancher UI has Stored Cross-site Scripting vulnerability in github.com/rancher/rancher
Rancher UI has Stored Cross-site Scripting vulnerability in github.com/rancher/rancher. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability...
CVE-2024-57891 sched_ext: Fix invalid irq restore in scx_ops_bypass()
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix invalid irq restore in scxopsbypass While adding outer irqsave/restore locking, 0e7ffff1b811 "scx: Fix raciness in scxopsbypass" forgot to convert an inner rqunlockirqrestore to rqunlock which could re-enable IRQ...
