617 matches found
CVE-2025-20090
Untrusted Pointer Dereference for some IntelR QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-20090
CVE-2025-20090 describes an untrusted pointer dereference in Intel(R) QuickAssist Technology software prior to version 2.5.0, which may allow an authenticated user to potentially cause a local-denial-of-service. Affected product: Intel QuickAssist Technology software before 2.5.0. Root cause: unt...
CVE-2025-8836 JasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
A vulnerability was determined in JasPer up to 4.2.5. Affected by this issue is the function jpcfloorlog2 of the file src/libjasper/jpc/jpcenc.c of the component JPEG2000 Encoder. The manipulation leads to reachable assertion. The attack needs to be approached locally. The exploit has been...
JasPer 安全漏洞
Jasper is a flexible and powerful GitHub issue reader open-sourced by Jasper. A security vulnerability exists in JasPer 4.2.5 and earlier versions, which stems from a post-release reuse issue in the function jpcdecdump in the file src/libjasper/jpc/jpcdec.c. The vulnerability is caused by the...
Security update for ruby2.5
This update for ruby2.5 fixes the following issues: CVE-2025-6442: Fixed readheader HTTP Request Smuggling Vulnerability in WEBrick bsc1245254 CVE-2025-27221: Fixed userinfo leakage in URIjoin, URImerge and URI+ bsc1237805 Patch Instructions: To install this SUSE update use the SUSE recommended...
xsser
XSSER ========== Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: Non...
WordPress plugin Residential Address Detection 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
emlog 安全漏洞
emlog is emlog open source a PHP and MySQL based CMS website builder. A security vulnerability exists in emlog pro-2.5.17 and earlier versions, which stems from insufficient keyword parameter cleanup, and could lead to a remote attacker injecting arbitrary Web scripts...
WordPress Houzez theme <= 4.2.5 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Houzez versions = 4.2.5...
CVE-2022-50104
In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: Fix refcount leak in xivegetmaxprio offindnodebypath returns a node pointer with refcount incremented, we should use ofnodeput on it when done. Add missing ofnodeput to avoid refcount leak...
CVE-2022-50084
In the Linux kernel, the following vulnerability has been resolved: dm raid: fix address sanitizer warning in raidstatus There is this warning when using a kernel with the address sanitizer and running this testsuite: https://gitlab.com/cki-project/kernel-tests/-/tree/main/storage/swraid/scsiraid...
CVE-2022-50191
CVE-2022-50191 affects the Linux kernel regulator subsystem (of:), describing a refcount leak in the handling of of_get_regulation_constraints(). The remedy is a fixed lifecycle management: call of_node_put() on the reference returned by of_get_child_by_name() which had its refcount increased. Co...
CVE-2022-50135
Summary (CVE-2022-50135): In the Linux kernel, the RDMA/rxe path contains a bug where, during error handling in rxe_qp_from_init, the qp’s rcq and scq are set to NULL, but later in rxe_qp_do_cleanup they are dereferenced (qp->scq->num_wq and qp->rcq->num_wq). This results in a null-pt...
CVE-2022-50097
CVE-2022-50097 affects the Linux kernel’s video fbdev s3fb driver. The bug arises in s3fb_set_par() where the code computes screen_size from user input and can exceed info->screen_size, leading to a kernel PAGE_FAULT on write (local access) during memset_io. The issue is mitigated by the docum...
WordPress Soho Hotel theme <= 4.2.5 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Bonds in WordPress Theme Soho Hotel versions = 4.2.5...
CVE-2025-46154
Foxcms v1.25 has a SQL time injection in the $POST'dbname' parameter of installdb.php...
Deno 数据伪造问题漏洞
Deno is a simple, modern and secure JavaScript and TypeScript runtime environment from Deno Open Source. A data forgery issue vulnerability exists in Deno versions 1.46.0 through 2.1.6, which stems from the AES-256-GCM and AES-128-GCM unvalidated authentication tags, and could lead to a failure o...
CVE-2024-25614
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to denial-of-service conditions and impact the integrity of the...