28551 matches found
CVE-2026-98292
The Linux kernel contains a vulnerability in the btmtksdio and btmtkuart Bluetooth drivers. The issue arises because these drivers cast received WMT events directly to struct btmtk_hci_wmt_evt and read fields without verifying the event length. Additionally, in the FUNC_CTRL case, the drivers cas...
CVE-2026-98292 Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct btmtkhciwmtevt and read its op/flag fields without checking the event is lon...
CVE-2026-98292 Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct btmtkhciwmtevt and read its op/flag fields without checking the event is lon...
CVE-2026-98292
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct btmtkhciwmtevt and read its op/flag fields without checking the event is lon...
EUVD-2026-93220
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct btmtkhciwmtevt and read its op/flag fields without checking the event is lon...
CVE-2026-97300
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
CVE-2026-97300
The WP Event Solution WordPress plugin, in versions
CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
EUVD-2026-92959
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
PT-2026-107179
Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper neutralization of null bytes or NUL characters in the EventLogAppender allows a NUL character in logged content to truncate the Windows Event Log record. This results in all...
CVE-2026-105792: Deadlock
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/taskresult/taskname endpoint calls SessionManager.getresultbytask in ufo/server/services/sessionmanager.py, which acquires a non-reentrant lock and then calls...
CVE-2026-106463: Incorrect Authorization
Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organization event ingestion and rely on scoped...
CVE-2026-106458: Incorrect Authorization
Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...
CVE-2026-97300: Improper Control of Interaction Frequency
Unauthenticated Broken Access Control in WP Event Solution = 4.1.25 versions...
PT-2026-106755
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group documents/upload stores an attacker-controlled group document filename that group workspaces.html later interpolates into inline Share even...
PT-2026-107247
Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-bitbucket-server versions 0.4.0 through 0.5.14 Description Inconsistent repository filtering occurs during Bitbucket Server catalog event updates. Deployments utilizing event-driven updates may ingest...
PT-2026-106749
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task result/task name endpoint calls SessionManager.get result by task in ufo/server/services/session manager.py, which acquires a non-reentrant lock and then calls...
CVE-2026-98292: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c cast a received WMT event straight to struct btmtkhciwmtevt and read its op/flag fields without checking the event is lon...