CVE-2026-81038

The Bluetooth Object Transfer Service (OTS) server is vulnerable to an uninitialized stack memory disclosure or denial of service via the Object Action Control Point (OACP). The flaw exists in oacp_ind_send() (subsys/bluetooth/services/ots/ots_oacp.c), where the net_buf_simple_pull_le32()function...

CVE-2026-81038 Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses

The Object Transfer Service server builds its Object Action Control Point OACP response indication in oacpindsend subsys/bluetooth/services/ots/otsoacp.c. Before this fix the four-byte Checksum Value field was appended whenever the requested op code was BTGATTOTSOACPPROCCHECKSUMCALC, regardless o...

CVE-2026-84914

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

EUVD-2026-107877

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914 Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3...

CVE-2026-84914

The Calculate Working Days Drupal module (versions 0.0.0 to 2.0.3 ) is vulnerable to a Missing Authorization flaw (CWE-862 ). The module fails to sufficiently restrict access to its settings form , which allows for Forceful Browsing . An attacker could potentially access and modify configuration ...

Drupal Calculate Working Days authorization issue vulnerability

In Drupal Calculate Working Days versions 0.0.0 through 2.0.3, there is an authorization issue vulnerability stemming from missing authorization checks, which may lead to forced browsing...

Astra Linux – vulnerability in faad2

There is a stack-based buffer overflow in the third instance of the calculategain function in libfaad/sbrhfadj.c within Freeware Advanced Audio Decoder 2 FAAD2 version 2.8.8. A specially crafted input may result in a denial of service or potentially other unspecified impacts due to improper...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes WHY When PTEBufferSizeInRequests is zero, UBSAN reports the following warning because dmllog2 returns an unexpected negative value: shift exponent 4294966273 is t...

CVE-2026-105107 Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters

Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...

CVE-2026-105107

Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...

DRUPAL-CONTRIB-2026-122

Calculate Working Days allows you to calculate working days between 2 dates. This module doesn't sufficiently restrict access to its settings form...

Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122

Calculate Working Days allows you to calculate working days between 2 dates. This module doesn't sufficiently restrict access to its settings form...

PT-2026-84890

Name of the Vulnerable Software and Affected Versions Calculate Working Days versions 0.0.0 through 2.0.3 Description An authorization flaw in the Calculate Working Days module allows forceful browsing. The module fails to sufficiently restrict access to its settings form, which could allow...

PT-2026-67709

Name of the Vulnerable Software and Affected Versions Koha affected versions not specified Description The circulation statistics report in reports/issues stats.pl contains a flaw where the calculate function constructs SQL queries by concatenating user-controlled request parameters directly into...

PT-2026-67708

Name of the Vulnerable Software and Affected Versions Koha affected versions not specified Description The reports/bor issues top.pl script builds dynamic SQL within the calculate function by concatenating user-controlled request parameters directly into the query string. The Criteria parameter i...

PT-2026-67705

Name of the Vulnerable Software and Affected Versions Koha affected versions not specified Description An authenticated staff user with reports module permissions can perform SQL injection via the reports/acquisitions stats.pl endpoint. The issue occurs in the calculate function, where...

PT-2026-67707

Name of the Vulnerable Software and Affected Versions Koha affected versions not specified Description The reports/issues avg stats.pl script builds dynamic SQL within the calculate function by concatenating user-controlled request parameters directly into the query string. The Line and Column...