3509 matches found
EUVD-2026-87061
In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...
CVE-2026-98161
A flaw exists in the Linux kernel persistent memory (pmem ) subsystem where the pmem_submit_bio() function incorrectly handles REQ_PREFLUSH errors. Specifically, the driver continues to copy bio data even after a preflush failure, potentially overwriting the error with a subsequent successful REQ...
WordPress Restaurant Menu and Food Ordering plugin <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting vulnerability
Unauthenticated Stored Cross-Site Scripting vulnerability discovered by 刀 妖 in WordPress Plugin Restaurant Menu by MotoPress versions = 2.4.14...
CVE-2026-96568
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phonenumber' parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-96568 Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phonenumber' parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-96568 Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phonenumber' parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-96568
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.4.14 . The flaw stems from insufficient input sanitization and output escaping specifically involving the 'phone_number' parameter. This allows unaut...
EUVD-2026-86597
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phonenumber' parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-98161: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes pmemsubmitbio records a REQPREFLUSH error, but continues to copy the bio data and can later overwrite the error with a successful REQFUA flush. That lets data writes run after a fail...
PT-2026-98844
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pmem submit bio function where a REQ PREFLUSH error is recorded but the process continues to copy bio data. This can lead to the error being overwritten by a...
CVE-2026-96568: Improper Neutralization of Input During Web Page Generation
The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phonenumber' parameter in all versions up to, and including, 2.4.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2026-98069: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rdsconnshutdown rdsconnshutdown quiesces the transmit and receive-refill paths by waiting for RDSINXMIT and RDSRECVREFILL to be sampled clear, and then runs the transport shutdown and...
Linux Distros Unpatched Vulnerability : CVE-2026-93152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request...
Linux Distros Unpatched Vulnerability : CVE-2026-93181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-c...
Linux Distros Unpatched Vulnerability : CVE-2026-93069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OPP: Fix cleanup ordering Commit 173e02d67494 OPP: Initialize scope-based pointers inline added initialization for all pointers. In some cases, the ordering was...
CVE-2026-93181
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...
DEBIAN-CVE-2026-93181
In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Fix uncorebox ref/unref ordering In uncoreeventcpuonline, uncoreboxref was called before uncorechangecontext. uncoreboxref gates on box-cpu = 0, but box-cpu is still -1 at that point because...
CVE-2026-93152
In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...
AZL-102222 CVE-2026-93152 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...
DEBIAN-CVE-2026-93152
In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Use acquire/release for queue enabled state applenvmeinitqueue initializes queue state and then marks the queue enabled. The interrupt and request paths check enabled before using that queue state. The old wmb after...