142568 matches found
CVE-2026-115938
In Craft CMS , an authenticated control panel user can exploit a vulnerability where the allowed column filter delegates property lookups to Yii ArrayHelper , bypassing the Twig sandbox 's security policies. By submitting an element-search condition, an attacker can use repeated single-segment lo...
CVE-2026-115938 Low privilege condition filter escapes Twig sandbox, recovers "securityKey" and reaches RCE
Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed column filter delegates property lookup to Yii ArrayHelper, outside Twig’s SecurityPolicy. Repeated single-segment...
CVE-2026-99016
In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the atomic access accessok checks untaggedaddruaddr, but archfutexatomicopinuser and futexatomiccmpxchginatomic hand the raw uaddr to the inline asm amoswap/amoadd/.../lr.w+sc.w through...
EUVD-2026-108810
In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the atomic access accessok checks untaggedaddruaddr, but archfutexatomicopinuser and futexatomiccmpxchginatomic hand the raw uaddr to the inline asm amoswap/amoadd/.../lr.w+sc.w through...
UBUNTU-CVE-2026-101599
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
UBUNTU-CVE-2026-101768
Vulnerability in the MySQL Connectors product of Oracle MySQL compone...
UBUNTU-CVE-2026-101625
Vulnerability in the MySQL Connectors product of Oracle MySQL compone...
CVE-2026-87301
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
CVE-2026-87293
Vulnerability in Oracle Java SE component: RMI. Supported versions...
CVE-2026-87303
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
UBUNTU-CVE-2026-87293
Vulnerability in Oracle Java SE component: RMI. Supported versions...
UBUNTU-CVE-2026-87301
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
UBUNTU-CVE-2026-87303
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualiza...
CVE-2026-91403
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and...
UBUNTU-CVE-2026-91411
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...
Linux Distros Unpatched Vulnerability : CVE-2026-101678
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable...
UBUNTU-CVE-2026-91398
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...
CVE-2026-91385
Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent...