Lucene search
+L

14012 matches found

Positive Technologies
Positive Technologies
added 2025/01/07 12:00 a.m.10 views

PT-2025-1870 · WordPress · Wp Jquery Datatable

Name of the Vulnerable Software and Affected Versions: WP jQuery DataTable plugin for WordPress versions up to, and including, 4.0.1 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'wp jdt' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS6.1AI score0.00246EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/01/07 12:00 a.m.9 views

WordPress plugin Alpha Price Table For Elementor 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS7.7AI score0.00246EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/06 12:00 a.m.12 views

The vulnerability of the geni_se_clk_tbl_get() function in the QCOM GENI Serial Engine Driver (drivers/soc/qcom/qcom-geni-se.c) in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the geniseclktblget function in the QCOM GENI Serial Engine Driver drivers/soc/qcom/qcom-geni-se.c in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service...

4.6CVSS7AI score0.0029EPSS
SaveExploits0References28Affected Software5
ClickHouse
ClickHouse
added 2025/01/05 12:00 a.m.32 views

CVE-2025-1385

When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits...

7.5CVSS6.2AI score0.0046EPSS
SaveExploits0
NVD
NVD
added 2025/01/02 4:15 p.m.18 views

CVE-2022-47601

Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2...

5.3CVSS0.00408EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.11 views

PT-2025-1373 · Joomunited · Joomunited Wp Table Manager

Name of the Vulnerable Software and Affected Versions: JoomUnited WP Table Manager versions 3.5.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in JoomUnited WP Table Manager, which allows exploiting incorrectly configured access control security levels...

5.3CVSS6.9AI score0.00408EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.9 views

PT-2025-30823

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the Linux kernel's remoteproc core component. Specifically, when attaching to a remote processor via rproc attach, if rproc handle resources fails, the clean tabl...

5.5CVSS6.8AI score0.0016EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.9 views

PT-2026-21540

Name of the Vulnerable Software and Affected Versions strukturag libde265 versions prior to commit d9fea9d Description A segmentation fault exists in strukturag libde265 due to an issue within the decoder context::compute framedrop table component. This can lead to a program crash. Recommendation...

6.2CVSS5.2AI score0.00159EPSS
SaveExploits1References34
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.10 views

PT-2025-41375

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The AMD IOMMU host page table implementation has a potential race condition during page table level increases. Specifically, in the unmap path iommu v1 unmap pages, the fetch pte functio...

4.7CVSS7.9AI score0.00107EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.19 views

PT-2026-8175

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where the syscall number, a user-controlled value, is used to index into the syscall table. This can lead to speculative out-of-bounds access and potenti...

7CVSS7.1AI score0.00126EPSS
SaveExploits0
OSV
OSV
added 2024/12/30 1:23 p.m.18 views

SUSE-SU-2024:4436-1 Security update for grpc

This update for grpc fixes the following issues: - CVE-2024-7246: HPACK table poisoning by gRPC clients communicating with a HTTP/2 proxy. bsc1228919 - CVE-2024-11407: data corruption on servers with transmit zero copy enabled. bsc1233821...

7.5CVSS7.1AI score0.00577EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2024/12/30 5:54 a.m.9 views

CVE-2024-56756

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but nvmeallochostmem could break out of the loop earlier on memory...

5.5CVSS7.1AI score0.00218EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/12/30 4:53 a.m.18 views

CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

6.1CVSS7AI score0.00214EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2024/12/30 3:48 a.m.8 views

SUSE CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

5.5CVSS7.7AI score0.00214EPSS
SaveExploits0References16
SUSE CVE
SUSE CVE
added 2024/12/30 3:48 a.m.4 views

SUSE CVE-2024-56756

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but nvmeallochostmem could break out of the loop earlier on memory...

5.3CVSS7.5AI score0.00218EPSS
SaveExploits0References17
RedhatCVE
RedhatCVE
added 2024/12/29 2:51 p.m.14 views

CVE-2024-56673

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Do not call pmd dtor on vmemmap page table teardown The vmemmap's, which is used for RV64 with SPARSEMEMVMEMMAP, page tables are populated using pmd page middle directory hugetables. However, the pmd allocation is not...

5.5CVSS6.8AI score0.00186EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2024/12/29 2:35 p.m.12 views

CVE-2024-53233

In the Linux kernel, the following vulnerability has been resolved: unicode: Fix utf8load error path utf8load requests the symbol "utf8datatable" and then checks if the requested UTF-8 version is supported. If it's unsupported, it tries to put the data table using symbolput. If an unsupported...

5.5CVSS6.8AI score0.00222EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/29 12:15 p.m.10 views

AZL-54830 CVE-2024-56756 affecting package kernel for versions less than 6.6.64.2-1

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but nvmeallochostmem could break out of the loop earlier on memory...

5.5CVSS6.5AI score0.00218EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/29 12:15 p.m.15 views

CVE-2024-56756

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but nvmeallochostmem could break out of the loop earlier on memory...

5.5CVSS0.00218EPSS
SaveExploits0References10
OSV
OSV
added 2024/12/29 12:15 p.m.3 views

DEBIAN-CVE-2024-56756

In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix freeing of the HMB descriptor table The HMB descriptor table is sized to the maximum number of descriptors that could be used for a given device, but nvmeallochostmem could break out of the loop earlier on memory...

5.5CVSS5.6AI score0.00218EPSS
SaveExploits0References1
Rows per page
Query Builder