SUSE CVE-2026-77413

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to supply an expression could use inherited...

EUVD-2026-65177

A vulnerability has been found in Faveo Helpdesk up to 2.0.3. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler. Such manipulation of the argument data1 leads to path traversal. The attack can be launched remotely...

CVE-2026-52491

The libtiff library (version 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938) contains a vulnerability that allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component. Affected systems using Amazon Linux 2 can remediate this by updating to libtiff-4.0.3-35.amzn2.0.3...

PT-2026-81140

Name of the Vulnerable Software and Affected Versions Grav CMS versions prior to 2.0.16 Description An issue exists in the media directory Twig function that fails to validate filesystem paths. Authenticated users with page authoring privileges can provide arbitrary filesystem paths to this...

PT-2026-81356

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Insufficient validation of JVM options passed through the options parameter in the java function allows the injection of dangerous JVM flags. By supplying malicious options such as -agentpath,...

CVE-2026-52491

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...

CVE-2026-52491

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...

The vulnerability of the send_done() function in the fs/smb/server/transport_rdma.c file of the Smb kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the senddone function in the fs/smb/server/transportrdma.c file of the Smb kernel of the Linux operating system is related to improper handling of the absence of a special element. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the...

The vulnerability of the jumbo_frm() function in the drivers/net/ethernet/stmicro/stmmac/chain_mode.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the as102_usb_probe() function in the drivers/media/usb/as102/as102_usb_drv.c driver for Linux-based USB multimedia devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the as102usbprobe function in the drivers/media/usb/as102/as102usbdrv.c file of the Linux multimedia device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the lookup() function in the child_process module of the json-data transformation software JSONata allows a attacker to execute arbitrary code.

The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260825-73-0028

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a system...

CVE-2026-39113

The SQLite database management system contains a heap buffer overflow vulnerability within the optional SQLAR extension . Specifically, the sqlar_uncompress() function (located in ext/misc/sqlar.c) may allow an attacker to write beyond the heap allocation boundaries on LP64 systems when processin...

CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...

PT-2026-86427

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.38 through 2.44 Description Calling the functions strfmon and strfmon l can result in a buffer overflow where data is written past the end of the caller-supplied output buffer. This occurs when a conversion utilizes...

The vulnerability of the __do_syscall() function in the arch/s390/kernel/syscall.c module of the S390 platform support module for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dosyscall function in the arch/s390/kernel/syscall.c module of the S390 platform support for the Linux operating system is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-81911

Kimai versions before 2.56.0 fail to restrict the config Twig function in sandboxed invoice and export templates, allowing administrators to access arbitrary configuration keys. Attackers with admin privileges can upload malicious templates to exfiltrate server-wide secrets including LDAP bind...

EUVD-2026-66177

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...

CVE-2026-52491

An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main component...

CVE-2026-63587: Authentication Bypass Using an Alternate Path or Channel

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...