111921 matches found
PT-2026-94421
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow occurs in the net/sched component when handling the quantum value. The hhf init function sets q-quantum using psched mtu without an overflow check. On devices with an...
PT-2026-95151
Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.7.5 Description An authenticated administrator without order modification privileges can delete order-history notes, which removes operational records and audit-trail data. This occurs because the delete-note handl...
CVE-2026-90229: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nvme-apple: Destroy the admin queue on removal The admin queue is allocated with blkmqallocqueue but never destroyed. nvmefreectrl only drops the last reference and blkmqexitqueue and blksyncqueue never run: the hctx is never mov...
PT-2026-94422
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A signed overflow occurs in the fq pie init function when the default quantum is set using psched mtu without clamping. On devices with an exceptionally large Maximum Transmission Unit...
PT-2026-94424
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the fq init function where quantum and initial quantum are computed using psched mtu without overflow checks. When a device has an excessively large Maximum Transmissi...
PT-2026-95090
Name of the Vulnerable Software and Affected Versions OpenReception versions prior to 1.1.1 Description An authentication bypass exists where the endpoint "POST /api/auth/passkeys" accepts a userId and a passkey without requiring an authenticated session. The system fails to call...
PT-2026-94406
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the network scheduler where the qdisc get stab function accepts a user-supplied size table. The qdisc calculate pkt len function can amplify the qdisc pkt len value...
PT-2026-94401
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the packet classification path where the htb classify function does not bound the number of hops when following filter-selected inner classes. A filter on an inner cla...
CVE-2026-89064: Insufficiently Protected Credentials
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to Insufficient Credential Protection in versions up to, and including, 7.110. This is due to the Ai1wmMainController::init method — registered on the admininit hook, which fires unauthenticated on admin-ajax.php and...
CVE-2026-76154: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin...
PT-2026-94398
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Fair Queuing fq scheduler where the change path accepts TCA FQ QUANTUM and TCA FQ INITIAL QUANTUM values up to INT MAX. This allows a user with CAP NET ADMIN...
CVE-2026-54612: Improper Limitation of a Pathname to a Restricted Directory
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. From 1.0.0 until 1.0.8.5, saveGlobalElements in admin/controller/editor/global-trait.php concatenates the attacker-controlled file portion of data-v-save-global to the active theme directory...
CVE-2026-54507: Server-Side Request Forgery (SSRF)
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, the oEmbedProxy handler in admin/controller/editor/editor.php accepts an attacker-controlled url parameter and passes it to getUrl, while validateUrl in system/functions.php...
CVE-2026-54613: Improper Limitation of a Pathname to a Restricted Directory
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.5, getThemeFolder in admin/controller/editor/revisions.php returns the attacker-controlled theme parameter without sanitization, and backupFolder concatenates it beneath DIRTHEME...
PT-2026-95154
Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.7.5 Description An issue exists in the admin/sources/maintenance.index.inc.php endpoint where administrator-controlled tablename values are inserted into ALTER TABLE, CHECK TABLE, and ANALYZE TABLE statements witho...
PT-2026-95142
Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.5 Description The oEmbedProxy handler in admin/controller/editor/editor.php accepts an attacker-controlled url parameter and passes it to getUrl. The validateUrl function in system/functions.php only checks the...
PT-2026-94137
Name of the Vulnerable Software and Affected Versions All-in-One WP Migration and Backup versions prior to 7.111 Description The plugin contains an issue related to insufficient credential protection. The Ai1wm Main Controller::init function, which is registered on the admin init hook and execute...
Geomap MapLibre XSS
A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuration, enabling escalation to Org Admin...
CVE-2026-61594
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the live WebSocket transport authorizes a mount via checkviewauth, not Django's View.dispatch chain. As a result, standard Django authorization —...
