2703 matches found
CVE-2026-64013
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI button driver. This vulnerability occurs because the ACPI General Purpose Event GPE handler is not properly removed when the driver is unloaded. An attacker could potentially trigger an ACPI notify event on a...
SUSE CVE-2026-64013
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...
BestWebSoft's Twitter < 2.55 - Cross-Site Scripting
The twitter-plugin plugin before 2.55 for WordPress has XSS. id: CVE-2017-18505 info: name: BestWebSoft's Twitter 2.55 - Cross-Site Scripting author: luisfelipe146 severity: medium description: | The twitter-plugin plugin before 2.55 for WordPress has XSS. impact: | Authenticated attackers can...
Linux Distros Unpatched Vulnerability : CVE-2026-64013
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee ACPI: button: Install notifier for system events as well changed the ACPI notify...
CVE-2026-64013
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...
CVE-2026-63943
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
CVE-2026-64013 ACPI: button: Fix ACPI GPE handler leak during removal
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...
CVE-2026-64013
The CVE-2026-64013 issue affects the Linux kernel ACPI button handling. A change to the ACPI notify handler type to ACPI_ALL_NOTIFY in a commit (Install notifier for system events as well) was not reflected in acpi_button_remove(), causing the notify handler to leak after driver removal. The cons...
CVE-2026-64013 ACPI: button: Fix ACPI GPE handler leak during removal
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...
EUVD-2026-45586
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...
CVE-2026-64013
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPIALLNOTIFY, but it forgot to update...
CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
EUVD-2026-45716
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
CVE-2026-63943
The CVE-2026-63943 entry concerns the Linux kernel driver for the xpad (gamepad) device. It describes an out-of-bounds access in xpadone_process_packet(), which uses urb->actual_length as an index to the share-button byte (data[len-18] or data[len-26]); with len and data[0] under the device’s ...
CVE-2026-63943 Input: xpad - fix out-of-bounds access for Share button
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadoneprocesspacket receives len directly from urb-actuallength and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are und...
PT-2026-61330
In the Linux kernel, the following vulnerability has been resolved: ACPI: button: Fix ACPI GPE handler leak during removal Commit a7e23ec17fee "ACPI: button: Install notifier for system events as well" changed the ACPI notify handler type for ACPI buttons to ACPI ALL NOTIFY, but it forgot to upda...
PT-2026-61260
In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share button xpadone process packet receives len directly from urb-actual length and uses it to index the share-button byte at datalen - 18 or datalen - 26. Since both len and data0 are...
CVE-2026-49977
tarteaucitron.js before version 1.33.0 is vulnerable: tarteaucitron.cookie.purge() runs on any element with purgeBtn without verifying the element or the cookie’s service, allowing an attacker who can inject HTML with data-cookie attributes to silently delete a non-HttpOnly cookie when a user cli...
tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies
Summary tarteaucitron provides a list of cookies and buttons to delete them. If an attacker can write HTML with data attributes, they could create an element that silently deletes a cookie when clicked and trick a user to delete this cookie. Details tarteaucitron.cookie.purge is called on any...
GHSA-JXJ7-G6GM-49J7 tarteaucitron: data-cookie attribute can be used to delete arbitrary cookies
Summary tarteaucitron provides a list of cookies and buttons to delete them. If an attacker can write HTML with data attributes, they could create an element that silently deletes a cookie when clicked and trick a user to delete this cookie. Details tarteaucitron.cookie.purge is called on any...