17539 matches found
CVE-2026-74356 vhost: fix vhost_get_avail_idx for a non empty ring
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all entries have been consumed, which is usually the same. But not always - i...
CVE-2026-74356 vhost: fix vhost_get_avail_idx for a non empty ring
In the Linux kernel, the following vulnerability has been resolved: vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all entries have been consumed, which is usually the same. But not always - i...
PT-2026-72792
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vhost component where the function vhost get avail idx incorrectly reports whether all entries have been consumed instead of reporting if vq-avail idx has been...
CVE-2026-74242
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-66424
CVE-2026-66424 affects the WordPress plugin SMS Alert Order Notifications (versions
CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-66424 WordPress SMS Alert Order Notifications plugin <= 3.9.7 - Privilege Escalation vulnerability
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
EUVD-2026-57860
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-66424
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-66424: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
PT-2026-71547
Unauthenticated Privilege Escalation in SMS Alert Order Notifications = 3.9.7 versions...
CVE-2026-73570: Improper Neutralization of Special Elements used in an OS Command
A remote code execution vulnerability exists in Zimbra Collaboration ZCS before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing, an unauthenticated attacker can send...
CVE-2026-70560 Ultimate POS Stored XSS via First Name Field in Leave Notifications
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
CVE-2026-70560 Ultimate POS Stored XSS via First Name Field in Leave Notifications
Ultimate POS Stock Management & Point of Sale contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user first-name field during account creation. Attackers with a...
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62690 Windows Push Notifications Elevation of Privilege Vulnerability
...
EUVD-2026-56344
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62690
CVE-2026-62690 concerns Windows Push Notifications. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, allowing an authorized attacker to elevate privileges locally. The available documents do not specify the affected product versio...