77880 matches found
CVE-2026-54174: Improper Validation of Integrity Check Value
melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, corresponding to melange prior to version 0.50.4, verified the control section hash .PKGINFO etc. against the signed APKINDEX, but never verified the data section hash the actual package files tha...
CVE-2026-89745: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...
CVE-2026-89632: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-before-check of ReparseDataLength in reparsebufptr reparsebufptr reads buf-ReparseDataLength before checking that count covers the full fixed header: buf = struct reparsedatabuffer u8 io + off; len = sizeofbu...
PT-2026-89860
AVideo through 29.0 contains an insecure direct object reference IDOR vulnerability in objects/categoryDeleteAssets.json.php. The endpoint validates only the Category::canCreateCategory capability and a CSRF nonce before passing the attacker-supplied $ REQUEST'id' to Category::deleteAssets, which...
PT-2026-89888
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed portions are omitted from inspection, enabling embedded commands to execute on the user's system without approval...
PT-2026-90282
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the jbd2 component where the journal shrink one cp list function fails to perform a need resched check when skipping busy checkpoint buffers while called with JBD2...
PT-2026-90436
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the UBIFS filesystem due to an incorrect sign in the signature length check within the ubifs sb verify signature function. The function incorrectly adds t...
PT-2026-90427
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System Daemon NFSD where the nfsd mode check function contains a flawed WARN ON ONCE macro. In scenarios involving NFS reexport, the function may...
PT-2026-90503
ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...
PT-2026-90592
Name of the Vulnerable Software and Affected Versions DT LMS – elearning versions prior to 1.2 Description The DT LMS – elearning WordPress plugin allows unauthenticated attackers to modify arbitrary plugin option values in the wp options table. This is caused by a missing capability check and la...
PT-2026-96604
In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN ON ONCE from nfsd mode check The header for commit e75b23f9e323 "nfsd: check d can lookup in fh verify of directories" details the assumption that justified adding the WARN ON ONCE to nfsd mode check, tha...
PT-2026-96539
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs check trans2 for malformed secondary T2 When a valid primary TRANSACT2 response has been received mid-resp buf set, mid-multiRsp true and a subsequent secondary response causes cifs...
PT-2026-96434
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pcl for each segment for empty chunks When a parsed chunk list contains a chunk whose ch segcount is zero, pcl for each segment computes its inclusive upper bound as &chunk-ch segmentsch segcount - 1. ch segcount is...
PT-2026-89901
MoguBlog through 6.2 contains an authorization bypass vulnerability in the comment deletion endpoint that performs ownership checks against request-body fields instead of the authenticated principal. Attackers can delete arbitrary comments and their replies by supplying comment UIDs and author UI...
PT-2026-89741
Name of the Vulnerable Software and Affected Versions GStreamer affected versions not specified Description A flaw in the gst-plugins-good isomp4 plugin occurs when processing specially crafted MP4 or MOV files containing CEA-608 closed-caption data. An integer overflow in 32-bit unsigned...
PT-2026-89802
WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected...
PT-2026-89785
The Visualizer WordPress plugin before 4.0.6 does not properly authorise chart-deletion requests, performing only a site-wide capability check with no per-object ownership verification, allowing users with the Contributor role and above to permanently delete any chart on the site, including chart...
PT-2026-89776
The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before saving popup configuration to a product, nor escape the stored values on output, allowing any authenticated user such as a subscriber to store JavaScript that executes ...
PT-2026-89787
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download...
