90380 matches found
PT-2026-121846
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the host1x device init function, the error teardown paths fail to verify if client-ops is valid before dereferencing it. This differs from the forward initialization paths, which...
Zimbra Collaboration Suite processing logic error vulnerability
Versions of Zimbra Collaboration Suite prior to 10.1.21 contain a logic error vulnerability stemming from hostname normalization issues in the email HTML cleaner. DefangFilter and OWASP ActionAttributePolicy compare the form action hostname with the request hostname prior to browser URL...
Zephyr resource management error vulnerability
Versions Zephyr 4.3.0 through 4.5.0 contain a resource management error vulnerability. This vulnerability arises because when the arm64 MMU backend uses invalidatetlbpage in arch/arm64/core/mmu.c, the TLBI VAE1IS operand matches only ASID 0 and global entries. As a result, cache invalidation cann...
Gede Lumbung HospitalManagement input validation error vulnerability
There is an input validation error vulnerability in Gede Lumbung HospitalManagement. This vulnerability stems from improper handling of the ‘urlroute’ parameter by the ‘simpan’ function in the file application/modules/admin/controllers/routingpages.php within the URL Validation component. It may...
PT-2026-121862
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm scmi firmware component where the notification parser fails to validate the payload size of BASE ERROR EVENT. This event contains a variable number of message...
Part-DB input validation error vulnerability
Versions of Part-DB prior to 2.13.2 contain an input validation error vulnerability. This flaw arises from the failure to sanitize spreadsheet formula characters within the part import/export workflows. Authenticated users with import privileges can upload CSV files containing formula prefix...
Red Hat Enterprise Linux buffer error vulnerability
Red Hat Enterprise Linux versions 7, 8, 9, and 10 contain a buffer error vulnerability. This vulnerability stems from the DHCPv6 option parser in the open-iscsi iscsiuio component failing to ensure a NUL terminator exists when calling strlen on raw network data. As a result, reading beyond the...
Zimbra Collaboration Suite input validation error vulnerability
Zimbra Collaboration Suite versions 10.1.17 and earlier contain an input validation error vulnerability. This vulnerability stems from request attribute overwriting; unauthenticated requests containing /h/ can overwrite the servlet attributes intended for trusted internal scheduling. RestFilter...
RHEL 9 : php (RHSA-2026:88659)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88659 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: OOM bailout during request parsi...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel version 6.17. It arises when the XSK buffer is not freed after an error bit in a descriptor is set by RX, potentially leading to a buffer leak...
Dimitrij Drus Heimdall input validation error vulnerability
Versions of Dmitry Drus Heimdall prior to 0.17.17 contain an input validation error vulnerability. This vulnerability arises when constructing a Forwarded HTTP header under proxy mode without removing commas and semicolons from the request’s Host header value. As a result, it may allow injection ...
AgentFront mcp-from-openapi input validation error vulnerability
In AgentFront versions mcp-from-openapi from 2.2.0 up to 2.9.0, there is an input validation error vulnerability. This vulnerability arises because it is possible to bypass the ssrf.blockedHosts list by using a trailing hostname. When attackers control the OpenAPI specification URL or redirect...
Lookyloo input validation error vulnerability
Versions prior to Lookyloo 1.39.4 contain an input validation error vulnerability. This vulnerability arises because unauthenticated users can pass the email and comment parameters via the /json//report API endpoint incorrectly, thereby overwriting the asadmin parameter. When asadmin is set to...
PT-2026-122142
Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When a user attempts to log in, the application returns slightly different error messages depending on...
PT-2026-121815
gose parsed the JWS crit header into JwsHeader.Crit and then never read it. RFC 7515 §4.1.11 requires a recipient to reject a JWS whose listed critical extension parameters it does not understand. gose implements no header extensions, so every token carrying a non-empty crit should have been...
Pypdf resource management error vulnerability
Versions of pypdf prior to 6.21.2 contain a resource management error vulnerability. This vulnerability allows attackers to craft PDFs that reference the same non-existent indirect object repeatedly, triggering repeated full file recovery loads and prolonged execution when accessing related pages...
Eclipse KeyPont - GOSE resource management error vulnerability
Eclipse KeyPont – Versions 0.7.3 through 0.13.0-rc1 and versions prior to 1.0.0-rc4 contain a resource management error vulnerability. This vulnerability arises because jwkFields.CheckConsistency employs nested loops to detect duplicate keyops entries; as a result, the validation cost grows...
ROS-20261023-73-0183
The vulnerability of the sndctlasciielemidparse function in the library for interacting with kernel audio drivers from the Alsa-lib library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE CVE-2026-98563
In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylinkbringupphy stores the PHY in pl-phydev before its last fallible step: on a MAC whose phylink ops implement LPI, phyeeerxclockstop can fail with a real MDIO error...
