1277 matches found
CVE-2026-99130
In the Linux kernel, the following vulnerability has been resolved: i...
EUVD-2026-111882
In the Linux kernel, the following vulnerability has been resolved: iouring/cancel: don't spin on local work the task can't run iouringcancelgeneric refuses to sleep while any ring on the exiting task's tctx has local work pending. It assumes the task is that ring's submitter and that the next...
CVE-2026-110292
The PayPlug for WooCommerce Official WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, allowing unauthenticated users to disclose another customer's order key and cancel their unpaid guest order...
EUVD-2026-111709
The PayPlug for WooCommerce Official WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, allowing unauthenticated users to disclose another customer's order key and cancel their unpaid guest order...
PT-2026-127826
The PayPlug for WooCommerce Official WordPress plugin before 3.1.1 does not verify that the requester owns the WooCommerce order named in a payment request, allowing unauthenticated users to disclose another customer's order key and cancel their unpaid guest order...
CVE-2026-117504
A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributedmanager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely...
CVE-2026-117504
A vulnerability in a2aproject a2a-go (up to version 2.4.0 ) allows for a remote denial of service (DoS) . The flaw exists within the Cancel function of the internal/taskexec/distributed_manager.go file in the Distributed Manager component. To remediate this issue, users should upgrade to version ...
CVE-2026-117504 a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service
A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributedmanager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely...
CVE-2026-117504
A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributedmanager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely...
EUVD-2026-111030
A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributedmanager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely...
CVE-2026-117504 a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service
A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributedmanager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely...
PT-2026-126442
A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributed manager.go of the component Distributed Manager. Such manipulation leads to denial of service. It is possible to launch the attack remotely...
CVE-2026-93627
An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to cancel or modify an existing meeting in a recipient's calendar. Zimbra accepts iCalendar CANCEL and REQUEST components without verifying that the email...
CVE-2026-93627 Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar CANCEL/REQUEST Organizer
An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to cancel or modify an existing meeting in a recipient's calendar. Zimbra accepts iCalendar CANCEL and REQUEST components without verifying that the email...
CVE-2026-93627
The Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.21 are vulnerable to an authentication bypass in the email calendar processing component. The root cause is that the system accepts iCalendar CANCEL and REQUEST components without verifying if the email sender is authorized to act as ...
PT-2026-122090
An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite ZCS allows an unauthenticated sender to cancel or modify an existing meeting in a recipient's calendar. Zimbra accepts iCalendar CANCEL and REQUEST components without verifying that the email...
kernel: Fix of 39 CVEs
nfs: fix UAF in direct writes CVE-2024-26958 - NFSD: Fix the behavior of READ near OFFSETMAX CVE-2022-48827 - thermal: core: prevent potential string overflow CVE-2023-52868 - ath5k: fix OOB in ath5keepromreadpcalinfo5111 CVE-2021-47633 - RDMA/cma: Ensure rdmaaddrcancel happens before issuing...
CVE-2026-114079
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can...
CVE-2026-114079 Trigger.dev before 4.5.6 Cross-Environment Deployment Cancel via Cancel Endpoint
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can...
CVE-2026-114079
Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because DeploymentService.getDeployment scopes lookups by projectId only. Attackers with a dev, preview, or CI secret key can...