| CVE-2024-13805 |
Advanced File Manager <= 5.2.14 存储型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-07 09:21:14 |
| CVE-2025-21843 |
drm/panthor: 在 panthor_ioctl_dev_query() 中避免使用无效值 |
N/A
|
Linux |
|
2025-03-07 09:10:01 |
| CVE-2025-21841 |
cpufreq/amd-pstate: 修正cpufreq_policy引用计数问题 |
N/A
|
Linux |
|
2025-03-07 09:10:00 |
| CVE-2025-21842 |
amdkfd: 初始化用户队列失败时正确释放 gang_ctx_bo |
N/A
|
Linux |
|
2025-03-07 09:10:00 |
| CVE-2025-21840 |
thermal/netlink: 通过调整UAPI头文件防止用户空间发生段错误 |
N/A
|
Linux |
|
2025-03-07 09:09:59 |
| CVE-2025-21838 |
USB: 外设: 内核: 设备删除后刷新工作队列 |
N/A
|
Linux |
|
2025-03-07 09:09:58 |
| CVE-2025-21839 |
KVM：x86：仅在进入.vcpu_run()循环之前用客户机的值加载DR6 |
N/A
|
Linux |
|
2025-03-07 09:09:58 |
| CVE-2025-21837 |
io_uring/uring_cmd: 无条件地在准备时间复制SQE |
N/A
|
Linux |
|
2025-03-07 09:09:57 |
| CVE-2025-21836 |
io_uring/kbuf: 升级时重新分配 buf 列表 |
N/A
|
Linux |
|
2025-03-07 09:09:56 |
| CVE-2025-21835 |
USB: Gadget: f_midi: 修复MIDI流描述符长度 |
N/A
|
Linux |
|
2025-03-07 09:09:55 |
| CVE-2025-1315 |
InWave Jobs <= 3.5.1 未经认证的权限提升漏洞 |
超危
|
Wordfence |
|
2025-03-07 08:21:28 |
| CVE-2024-12876 |
Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - 由于未认证的任意用户密码更改导致缺乏授权和权限提升漏洞 |
超危
|
Wordfence |
|
2025-03-07 08:21:28 |
| CVE-2024-13431 |
Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.8.3存在反射型跨站脚本漏洞 |
中危
|
Wordfence |
|
2025-03-07 08:21:28 |
| CVE-2025-0959 |
Eventer - WordPress Event & Booking Manager插件 <= 3.9.9.2 存在经认证的(subscriber+) SQL注入漏洞 |
高危
|
Wordfence |
|
2025-03-07 08:21:27 |
| CVE-2024-12609 |
Wordpress学校管理系统92.0.0及以下版本存在(view-attendance)处学生+认证SQL注入漏洞 |
中危
|
Wordfence |
|
2025-03-07 08:21:27 |
| CVE-2024-9658 |
Wordpress School Management System <= 93.0.0 存在授权账户接管和权限提升漏洞 |
高危
|
Wordfence |
|
2025-03-07 08:21:27 |
| CVE-2024-12610 |
Wordpress School Management System <= 93.0.0 版本存在未认证任意文章删除漏洞 |
中危
|
Wordfence |
|
2025-03-07 08:21:26 |
| CVE-2024-13781 |
Hero Maps Premium - Customizable Google Maps Plugin <= 2.3.9 - 经认证 (订阅用户+) SQL注入漏洞 |
中危
|
Wordfence |
|
2025-03-07 08:21:26 |
| CVE-2024-13904 |
WooCommerce Platform.ly 1.1.6及以下版本存在无需身份验证的盲注服务器端请求伪造漏洞 |
中危
|
Wordfence |
|
2025-03-07 08:21:26 |
| CVE-2024-12036 |
CS Framework <= 7.1 - 经身份验证（订阅者+）任意文件读取漏洞 |
高危
|
Wordfence |
|
2025-03-07 08:21:25 |