36 matches found
CVE-2026-102834: Integer Overflow or Wraparound
JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overflow or bounding the parsed Content-Length. An application consumes an MJPEG response from a malicious camera endpoint...
PT-2026-98673
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drr change class function where it fails to establish a minimum floor when falling back to psched mtu. If a crafted size table causes qdisc pkt len to reach...
CVE-2026-82743: Uncontrolled Resource Consumption
Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.awaitatleastone/1 lib/ash/actions/read/asynclimiter.ex waited for concurrent async read tasks by...
PT-2026-84092
Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow asynchronous read spin a scheduler thread at full CPU while the framework waits for it. Ash.Actions.Read.AsyncLimiter.await at least one/1 lib/ash/actions/read/async limiter.ex waited for concurrent async read tasks by...
CVE-2025-68253 mm: don't spin in add_stack_record when gfp flags don't allow
In the Linux kernel, the following vulnerability has been resolved: mm: don't spin in addstackrecord when gfp flags don't allow syzbot was able to find the following path: addstackrecordtolist mm/pageowner.c:182 inline incstackrecordcount mm/pageowner.c:214 inline setpageowner+0x2c3/0x4a0...
CVE-2025-68253: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm: don't spin in addstackrecord when gfp flags don't allow syzbot was able to find the following path: addstackrecordtolist mm/pageowner.c:182 inline incstackrecordcount mm/pageowner.c:214 inline setpageowner+0x2c3/0x4a0...
EUVD-2024-45638
Malicious code in bioql PyPI...
bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
...
CVE-2025-39886 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
In the Linux kernel, the following vulnerability has been resolved: bpf: Tell memcg to use allowspinning=false path in bpftimerinit Currently, calling bpfmapkmallocnode from bpfasyncinit can cause various locking issues; see the following stack trace edited for style as one example: ... 10.011566...
CVE-2024-51839
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth utech-spinning-earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through = 1.2...
CVE-2024-51839
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth utech-spinning-earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through = 1.2...
CVE-2024-51839 WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through 1.2...
CVE-2024-51839
CVE-2024-51839 – Utech Spinning Earth WordPress plugin exhibits a DOM-based XSS due to improper input neutralization during web page generation. Affected: Utech Spinning Earth versions up to 1.2 (and earlier). Public details across sources consistently describe the issue as Cross-Site Scripting w...
CVE-2024-51839 WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth utech-spinning-earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through = 1.2...
PT-2024-34966 · Utech · Utech Spinning Earth
Name of the Vulnerable Software and Affected Versions: Utech Spinning Earth versions 1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows DOM-Based XSS. This means that an attacker can...
CVE-2024-51839: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Meini Utech Spinning Earth utech-spinning-earth allows DOM-Based XSS.This issue affects Utech Spinning Earth: from n/a through = 1.2...
WordPress plugin Utech Spinning Earth has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
WordPress Utech Spinning Earth plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Utech Spinning Earth versions = 1.2...
WordPress Utech Spinning Earth Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
Software Utech Spinning Earth Type Plugin Vulnerable versions = 1.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51839 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b242dc4ec571 Credits SOPROBRO Required privilege Contribut...
