MEDIUM Severity CVEs

Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt

Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory result

Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious users

A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown fun

The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnerable to SQL Injection via the '

The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpw

The Admin Menu Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘placeholder’ parameter

The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vodsChanne

The Smart Table Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all

The Content Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid and List widge

The SKT Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in a

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Coun

The Cloud SAML SSO plugin for WordPress is vulnerable to Identity Provider Deletion due to a missing capability check on

The Optio Dentistry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'optio-lightbox'

The User Registration & Membership plugin for WordPress is vulnerable to SQL Injection via the 's' parameter in version

The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for

The Html Social share buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'zm_sh_

The REHub - Price Comparison, Multi Vendor Marketplace Wordpress Theme theme for WordPress is vulnerable to Information

The Easy Social Feed – Social Photos Gallery – Post Feed – Like Box plugin for WordPress is vulnerable to Stored Cross-S

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vul

fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, a

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature

An authorized user can cause a crash in the MongoDB Server through a specially crafted $group query. This vulnerability

MongoDB Server may allow upsert operations retried within a transaction to violate unique index constraints, potentially

An improper setting of the lsid field on any sharded query can cause a crash in MongoDB routers. This issue occurs when

A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description

The Biagiotti Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, a

In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: fix hwpoisoned large folio handling in s

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix panic due to PSLVERR When the PS

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - Prevent crash on suspend with iMX8QM

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - flush misc workqueue during device sh

In the Linux kernel, the following vulnerability has been resolved: parisc: Revise __get_user() to probe user read acce

In the Linux kernel, the following vulnerability has been resolved: parisc: Revise gateway LWS calls to probe user read

In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: fix TOCTOU race condition in

In the Linux kernel, the following vulnerability has been resolved: media: mt9m114: Fix deadlock in get_frame_interval/

In the Linux kernel, the following vulnerability has been resolved: media: venus: protect against spurious interrupts d

In the Linux kernel, the following vulnerability has been resolved: media: iris: Fix NULL pointer dereference A warnin

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check if hubbub is NULL in debugfs/amdg

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Destroy KFD debugfs after destroy KFD w

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a Null pointer dereference vul

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: ignore migration request to in

In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: prevent NULL deref in iova_to_phys Th

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Flush delayed SKBs while releasing RXE re

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid a NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: smb: server: split ksmbd_rdma_stop_listening() out

In the Linux kernel, the following vulnerability has been resolved: iio: accel: sca3300: fix uninitialized iio scan dat

In the Linux kernel, the following vulnerability has been resolved: comedi: Fix use of uninitialized memory in do_insn_

In the Linux kernel, the following vulnerability has been resolved: x86/cpu/hygon: Add missing resctrl_cpu_detect() in

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/nvif: Fix potential memory leak in nvif