68754 matches found
ROS-20260729-73-0011
The vulnerability in exim is related to errors in the representation of specified functions. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...
PT-2026-65691
The Streamit WordPress theme through 4.5.0 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions f...
CVE-2026-13423: Improper Control of Generation of Code
The Streamit WordPress theme through 4.5.0 does not perform any authorization or nonce verification on one of its unauthenticated AJAX routes, which invokes an attacker-supplied PHP function with an attacker-supplied argument array, allowing unauthenticated attackers to call arbitrary functions f...
ROS-20260729-73-0013
The vulnerability in exim is related to errors in the representation of specified functions. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information...
The vulnerability of the eem_unwrap() function in the drivers/usb/gadget/function/f_eem.c file of the Linux operating system’s USB gadget driver module allows a hacker to cause a service failure.
The vulnerability of the eemunwrap function in the drivers/usb/gadget/function/feem.c file of the Linux operating system’s USB gadget driver framework is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the recv_pkt() function in the net/bluetooth/6lowpan.c module of the Linux kernel’s Bluetooth subsystem allows a hacker to cause a service failure.
The vulnerability of the recvpkt function in the net/bluetooth/6lowpan.c module of the Linux Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...
PT-2026-65931
Name of the Vulnerable Software and Affected Versions Adminer affected versions not specified Description Remote attackers with authentication can execute arbitrary code on the web server. The issue occurs within the multi query method due to an incorrect check of a function return value...
The vulnerability of the amdgpu_userq_fence_driver_process() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c source file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the amdgpuuserqfencedriverprocess function in the drivers/gpu/drm/amd/amdgpu/amdgpuuserqfence.c source code of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to the occurrence of mutual locking. Exploiting this...
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.
The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...
@hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution
A SQL injection vulnerability exists in the escapeValue function used for parameter substitution. escapeValue dispatches on the type of the parameter value, and two of its branches failed to escape safely. An attacker who can control a parameter value can terminate the enclosing string literal an...
Exposure of Private Personal Information to an Unauthorized Actor
Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Exposure of Private Personal Information to an Unauthorized Actor via the getbody function. An attacker can obtain sensitive authorization headers by causing a redirect to a differe...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
CVE-2026-54619
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version...
CVE-2026-54619
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version...
SUSE CVE-2026-64538
In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6nhmtuchange. fib6nhmtuchange re-fetches idev via in6devgetarg-dev and dereferences idev-cnf.mtu6 without a NULL check. addrconfifdown clears dev-ip6ptr with RCUINITPOINTER after rt6disableip has...
GHSA-J7FR-3V8C-3QC3 sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
Summary Using Databasecreateaggregate, createaggregatehandler, or Databasedefineaggregator to define an aggregate function, and then using an open statement calling that function after the database has been explicitly closed will result in an invalid memory read and a segmentation fault. Mitigati...
EUVD-2026-49899
sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5...
CVE-2026-54620 sqlite3-ruby has Use-After-Free in SQLite Aggregate Function Callbacks
sqlite3 provides Ruby bindings for the SQLite3 embedded database. From 2.1.0 to 2.9.4, the callbacks used for SQLite aggregate functions can be freed while still referenced during aggregation, resulting in a use-after-free. This issue is fixed in version 2.9.5...
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
Summary Using Databasecreatefunction or Databasedefinefunction to define the same function name more than once with different numbers of arguments "arity" or text encodings will result in a invalid memory read and a segmentation fault. Mitigation Upgrade to sqlite3 gem v2.9.5 or later. As a...