69356 matches found
The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to gain unauthorized access to protected information.
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to deficiencies in error handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...
Ubuntu Desktop Provision 安全漏洞
Ubuntu Desktop Provision is an open-source desktop configuration tool developed by Canonical. Version 24.04.4 of Ubuntu Desktop Provision contains a security vulnerability, which stems from improper handling of crash reports and could lead to password hash leaks...
Juniper Networks Junos Space 跨站脚本漏洞
Juniper Networks Junos Space is a network management solution provided by the company Juniper Networks. This solution supports automatic configuration, monitoring, and troubleshooting of devices and services throughout their entire lifecycle. Versions of Juniper Networks Junos Space prior to 24.1...
js-video-url-parser 安全漏洞
js-video-url-parser is a JavaScript library developed by Julian Hangstörfer for parsing video URL information. Versions of js-video-url-parser 0.5.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the handling of the timestamp parameter in the getTime function in the...
WordPress plugin adivaha Travel SQL注入漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...
RockyLinux 8 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, and gstreamer1-plugins-good (RLSA-2026:6750)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:6750 advisory. GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2920 GStreamer: GStreamer: Remote Code Execution via heap-based buffer...
The vulnerability of the btrfs_validate_super() function in the fs/btrfs/disk-io.c file of the Linux kernel’s file system allows a hacker to trigger a service failure.
The vulnerability of the btrfsvalidatesuper function in the fs/btrfs/disk-io.c file of the btrfs file system in Linux kernel is related to incorrect handling of error situations. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the msm_parse_deps() function in the drivers/gpu/drm/msm/msm_gem_submit.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the msmparsedeps function in the drivers/gpu/drm/msm/msmgemsubmit.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to improper handling of error situations. Exploiting this vulnerability may allow an attacker to cause a servic...
RockyLinux 10 : gstreamer1-plugins-bad-free, gstreamer1-plugins-base, gstreamer1-plugins-good, and gstreamer1-plugins-ugly-free (RLSA-2026:6259)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:6259 advisory. GStreamer: GStreamer: Arbitrary code execution via ASF file processing CVE-2026-2920 GStreamer: GStreamer: Remote Code Execution via heap-based buffer...
PT-2026-31768
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.22 Description OpenClaw is susceptible to an unbounded memory allocation issue in its remote media HTTP error handling. Attackers can exploit this by sending specially crafted HTTP error responses with large...
WordPress plugin adivaha Travel 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
Code-Projects Simple IT Discussion Forum SQL注入漏洞
Code-Projects Simple IT Discussion Forum is a simple forum developed by Code-Projects as open source. Version 1.0 of the code-projects Simple IT Discussion Forum has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter postid in the...
PT-2026-31618
Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality...
CLSA-2026-1775688811 Fix CVE(s): CVE-2026-32748, CVE-2026-33526
SECURITY UPDATE: denial of service via use-after-free in ICP - debian/patches/CVE-2026-33526.patch: remove duplicate rfc1738escape call in icpGetRequest that invalidated the previously escaped URL pointer - CVE-2026-33526 SECURITY UPDATE: denial of service via use-after-free in ICP request handli...
EUVD-2025-209347
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlgroup.asp endpoint...
EUVD-2025-209343
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /urlmember.asp endpoint...
EUVD-2025-209333
An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparmusb.asp endpoint...
EUVD-2025-209339
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint...
CVE-2026-5910
Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: Low...
