1835 matches found
CVE-2026-93740: Buffer Copy without Checking Size of Input
A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...
PT-2026-94575
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvme/ioctl component where the NVME IOCTL SUBMIT IO endpoint does not utilize the nvme cmd allowed function. This allows unprivileged users to perform I/O operatio...
PT-2026-94845
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/v3d component where Buffer Objects BOs were only attached to the last job in a submission chain. When the final job is a CACHE CLEAN job, preceding RENDER or C...
PT-2026-93617
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the accel/ethosu component where ethosu ioctl submit job allocates a done fence before validating buffer handles. If an error occurs after this allocation, ethosu job...
PT-2026-93443
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the drm/nouveau/uvmm component. In nouveau uvmm bind job submit, the OP MAP SPARSE case creates a region but leaves the op-ops variable as NULL. If a...
PT-2026-93672
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the usb-storage module specifically affecting ene ub6250. The ene ub6250 probe function calls usb stor probe2, which schedules delayed scan work. Subsequently,...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: nullblk: Fixed a issue where a NULL pointer dereference occurred when configuring ‘power’ and ‘submitqueues’. Writing ‘power’ and ‘submitqueues’ concurrently would trigger a kernel panic. Test script: bash modprobe nullblk...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: removing redundant scheduler job cleanup when CS aborts. When command submission fails due to an invalid userptr in amdgpucssubmit, legacy code will perform cleanup of scheduler jobs. However, this is completely...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: btrfs: Do not clean up the repair bio if submission fails. The submission helper always runs bioendio on the bio if submission fails. Therefore, cleaning up the bio only leads to various use-after-free errors and NULL pointer...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: drm/msm: Another leak in the submit error path has been fixed. putunusedfd does not free the allocated file if we have already performed fdinstall. Therefore, we also need to free the syncfile. Patchwork:...
Astra Linux – Vulnerability in Linux 5.15
A NULL pointer dereference flaw was discovered in the Linux kernel’s drivers/gpu/drm/msm/msmgemsubmit.c code, specifically in the submitlookupcmds function. This flaw occurs because there is no check on the return value of kmalloc. This issue allows a local user to crash the system...
CVE-2026-90607 Totolink A3002MU boa formNewSchedule buffer overflow
A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...
CVE-2026-90607
Totolink A3002MU (firmware Hh-B20211125.1046 ) is affected by a remote buffer overflow in the boa component, specifically in the function formNewSchedule of the file /boafrm/formNewSchedule. The root cause is the manipulation of the submit-url argument, which overflows the buffer and may allow an...
EUVD-2026-77144
A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...
CVE-2026-90607: Buffer Copy without Checking Size of Input
A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...
CVE-2026-81915: Missing Authorization
Concrete CMS below 9.5.3 does not perform an object-level authorization check when a Page Type was updated. The Types::submit dashboard controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType, so a signed-in dashboard user permitted to edit one...
CVE-2026-15354: Undefined Security Weakness
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-32566. Reason: This candidate is a reservation duplicate of CVE-2026-32566 Notes: All CVE users should reference CVE-2026-32566 instead of this candidate. All references and descriptions in this candidate have been...
CVE-2026-82364 macrozheng mall Order Submission submit race condition
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-48549
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...
CVE-2026-48549 Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie
Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 contains a CSRF vulnerability in cmd.cgi. When no Cookie header is present, the double-submit cookie protection can be bypassed by supplying matching NagFormId and nagFormId values in the POST body, allowing a cross-site request to execute...