44167 matches found
CVE-2026-68234
A flaw was found in the Linux kernel's drm/amdgpu component. The amdgpubocreatereserved function unconditionally increments a pin counter for a Buffer Object BO even if it is already pinned. This occurs when the function is called multiple times with the same BO, such as during firmware buffer...
CVE-2026-68101
A flaw was found in the Linux kernel's AMD GPU amdgpu driver. During the allocation or deallocation of a user pointer buffer object, a critical reference to its virtual memory object can become unavailable. This improper handling of memory submissions could lead to system instability or a denial ...
CVE-2026-72562
An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter. The filter value is concatenated directly into the SQL WHERE clause without parameterization. An attacker wit...
CVE-2026-72546
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint. The endpoint loads the target event by ID without scoping the...
CVE-2026-72540
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
CVE-2026-72543
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
CVE-2026-72562
An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter. The filter value is concatenated directly into the SQL WHERE clause without parameterization. An attacker wit...
CVE-2026-72562
CVE-2026-72562 affects Pimcore’s admin-ui-classic-bundle (through version 2.3). Affected: DataObject grid id column filter allows an SQL injection because the filter value is concatenated into the SQL WHERE clause without parameterization. Root cause: improper handling of filter input in backend ...
CVE-2026-72562 Pimcore pimcore admin-ui-classic-bundle - SQL Injection
An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter. The filter value is concatenated directly into the SQL WHERE clause without parameterization. An attacker wit...
CVE-2026-72547 Attendize Attendize - Insecure Direct Object Reference
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to bulk import attendees into events belonging to other accounts via the postImportAttendee endpoint. The endpoint loads the target event by ID without verifying ownershi...
CVE-2026-72547 Attendize Attendize - Insecure Direct Object Reference
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to bulk import attendees into events belonging to other accounts via the postImportAttendee endpoint. The endpoint loads the target event by ID without verifying ownershi...
CVE-2026-72546 Attendize Attendize - Insecure Direct Object Reference
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint. The endpoint loads the target event by ID without scoping the...
CVE-2026-72546 Attendize Attendize - Insecure Direct Object Reference
An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint. The endpoint loads the target event by ID without scoping the...
CVE-2026-72545 OpenSignLabs OpenSign - Insecure Direct Object Reference
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target...
CVE-2026-72545
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target...
CVE-2026-72545
OpenSignLabs OpenSign (affected up to v2.37.0) has an Insecure Direct Object Reference via the updatecontacttour Parse cloud function. The function performs no authentication or authorization, allowing unauthenticated remote attackers to write to any user contact record, potentially corrupting or...
CVE-2026-72543 OpenSignLabs OpenSign - Insecure Direct Object Reference
An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function. The function executes with useMasterKey and performs no authentication or authorization checks...
Security Bulletin:Vulnerability in binutils affects IBM Netezza Appliance
Summary The binutils package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-4647 Vulnerability Details CVEID:CVE-2026-4647 DESCRIPTION: A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as...
CVE-2026-68265
A flaw was found in the Linux kernel. Specifically, within the drm/xe/vm module, an out-of-bounds access can occur when handling the DRMXECONSULTMEMADVISEPREFLOC region for a Buffer Object BO Virtual Memory Area VMA. This happens because a value of -1 is incorrectly used as an index into a memory...
