Latest CVE Feed
Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.
Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.
Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.
Memory corruption when non-secure loader rewrites page tables before secure memory initialization.
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of th…
A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an unknown functionali…
The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capability check on the RES…
Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.
The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email…
Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions.
Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions.
Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions.
Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions.
Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Morning…
Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions.