15259 matches found
PT-2026-90499
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with edit page contents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type...
CVE-2026-89773: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dmstreamctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created...
PT-2026-90489
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amd/display component where the system fails to skip the HDCP High-bandwidth Digital Content Protection configuration routine during a transition state. Becaus...
PT-2026-96348
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip Update HDCP Config In Transition State Transition state does not have a valid dm stream ctx that should skip configuring HDCP routine. The routine is valid to go through only when a valid stream is created...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107289)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107289 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null checker before passing variables Checks null pointer before passing...
PT-2026-90315
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the fbdev omapfb panel-dsi-cm component, the dsicm probe function registers the display before initializing the ddata-lock mutex. After omapdss register display publishes the display,...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107296)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107296 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before multiple uses WHAT & HOW Poniters, such as streamenc...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107299)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107299 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow WHY & HOW Make sure vmid0p72idx,...
CVE-2026-81918: Improper Neutralization of Input During Web Page Generation
Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with editpagecontents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107276)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107276 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Stop amdgpudm initialize when stream nums greater than 6 Why Coverity reports...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107273)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107273 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add a dcstate NULL check in dcstaterelease How Check wheather state is NULL befo...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107309)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107309 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check null pointers before used WHAT & HOW Poniters, such as dc-clkmgr, are null...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107279)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107279 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check pipe offset before setting vblank pipectx has a size of MAXPIPES so checki...
CVE-2026-81940
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940
CVE-2026-81940 affects IBM Langflow OSS versions 1.0.0 through 1.11.5 , where improper neutralization of special characters in flow display names permits a remote authenticated attacker to execute arbitrary code. The underlying cause is classified as CWE-94 (Code Injection) : attacker-controlled ...
CVE-2026-81940 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
CVE-2026-81940: Improper Control of Generation of Code
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names...
PT-2026-89636
šØ CVE-2026-81940 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special characters in flow display names. š@cveNotify...