CVE-2024-0857

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Universal Software Inc. FlexWater Corporate Water Management allows SQL Injection. This issue affects FlexWater Corporate Water Management: before 5.452.0...

MAL-2025-852 Malicious code in microsoft.netcore.universalwindowsplatform (npm)

--- -= Per source details. Do not edit below this line.=-...

phy: qcom: qmp-usb: fix NULL-deref on runtime suspend

...

phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend

...

scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down

...

net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

...

xhci: tegra: fix checked USB2 port number

...

HP Universal Print Driver Series (PCL 6 and PostScript) - Potential Security Vulnerabilities

Potential vulnerabilities have been identified in HP Universal Print Driver Series PCL 6 and PostScript involving the following libraries: Update your version of the HP Universal Print Driver Series...

Debian dsa-5853 : libpam-u2f - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5853 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5853-1 [email protected] https://www.debian.org/security/...

Silicon CP210x VCP Windows installer 代码问题漏洞

Silicon CP210x VCP Windows installer is a CP210x VCP Windows installer from Silicon Corporation. A security vulnerability exists in Silicon CP210x VCP Windows installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute...

PT-2025-5661 · Git +1 · Libical

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following sequence: icalmemory strdup, icaltimezone...

DEBIAN-CVE-2024-57914

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

CVE-2024-57914 usb: typec: tcpci: fix NULL pointer issue on shared irq case

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix NULL pointer issue on shared irq case The tcpciirq may meet below NULL pointer dereference issue: 2.641851 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000010 2.641951 statu...

PT-2025-1231 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. Some values are serialized using the boost library, which...

PT-2025-1229 · Mercedes Benz · Mbux +1

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to the import or export of profile settings over USB in the Mercedes-Benz head-unit NTG6. A file within the profile folder is encoded with a...

CVE-2025-23483

Cross-Site Request Forgery CSRF vulnerability in hoyce Universal Analytics Injector universal-analytics-injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through = 1.0.3...

CVE-2025-23483

CVE-2025-23483 — The connected Red Hat/ENISA records confirm a Cross-Site Request Forgery (CSRF) vulnerability in Niklas Olsson’s Universal Analytics Injector plugin that enables Stored XSS. Affected: Universal Analytics Injector versions from 0? through 1.0.3 (per description: “from n/a through ...

CVE-2025-23483 WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Niklas Olsson Universal Analytics Injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through 1.0.3...

CVE-2025-23483 WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in hoyce Universal Analytics Injector universal-analytics-injector allows Stored XSS.This issue affects Universal Analytics Injector: from n/a through = 1.0.3...

WordPress Universal Analytics Injector plugin <= 1.0.3 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by SOPROBRO in WordPress Plugin Universal Analytics Injector versions = 1.0.3...