39102 matches found
CVE-2026-30569
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...
CVE-2026-30569
A Reflected Cross-Site Scripting XSS vulnerability exists in SourceCodester Sales and Inventory System 1.0. The vulnerability is located in the viewstockavailability.php file via the "limit" parameter. The application fails to sanitize the input, allowing remote attackers to inject arbitrary web...
CVE-2025-20096
Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...
CVE-2025-71258
BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authenticated attackers to cause the server to initiate arbitrary outbound requests. Attackers can exploit improper URL validation to...
CVE-2026-22321
A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain...
CVE-2026-21671
A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution RCE in high availability HA deployments of Veeam Backup & Replication...
CVE-2026-2273
CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of...
OPENSUSE-SU-2026:10438-1 openbao-2.5.2-1.1 on GA media
These are all security issues fixed in the openbao-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of the ipv6_find_tlv() function in the net/ipv6/exthdrs_core.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ipv6findtlv function in the net/ipv6/exthdrscore.c module of the Linux kernel involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the power_supply_temp2resist_simple() function in the drivers/power/supply/power_supply_core.c file of the Linux kernel’s power management driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the powersupplytemp2resistsimple function in the drivers/power/supply/powersupplycore.c file of the Linux kernel’s power management driver module is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the ata_tport_add() function in the drivers/ata/libata-transport.c file of the SATA/PATA driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the atatportadd function in the drivers/ata/libata-transport.c file of the Linux SATA/PATA driver kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerabilities of the functions __mptcp_close_ssk() and mptcp_worker() in the net/mptcp/protocol.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mptcpclosessk and mptcpworker functions in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the `rpmsg_chrdev_eptdev_destroy()` function in the drivers/rpmsg/rpmsg_char.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rpmsgchrdeveptdevdestroy function in the drivers/rpmsg/rpmsgchar.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
The vulnerability of the mlx5_tc_ct_entry_replacerule() function in the drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mlx5tcctentryreplacerule function in the drivers/net/ethernet/mellanox/mlx5/core/en/tcct.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the ext4_rename() function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4rename function in the fs/ext4/namei.c file of the Ext4 file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the qmiDecodeStringElem() function in the drivers/soc/qcom/qmiEncDec.c module of the SOC driver for the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the qmiDecodeStringElem function in the drivers/soc/qcom/qmiEncDec.c module of the SOC kernel driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the `ftrace_make_nop()` function in the `arch/arm64/kernel/ftrace.c` module, which is part of the Linux operating system’s ARM 64-bit kernel support, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ftracemakenop function in the arch/arm64/kernel/ftrace.c module, which is part of the Linux operating system’s ARM 64-bit kernel support, is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the __mptcp_close_ssk() function in the net/mptcp/protocol.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mptcpclosessk function in the net/mptcp/protocol.c module of the Linux kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the veth_convert_skb_to_xdp_buff() function in the drivers/net/veth.c module of the network device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vethconvertskbtoxdpbuff function in the drivers/net/veth.c module of the Linux kernel network device driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...