OpenSSH Cryptographic Protection Improper Operation Data Access Data Compromise

The vulnerability in the OpenSSH cryptographic protection tool is related to improper execution order. Exploitation of this vulnerability may allow an attacker to gain access to sensitive data and compromise data integrity...

CVE-2026-33683 AVideo vulnerable to Stored XSS via html_entity_decode() Reversing xss_esc() Sanitization in Channel About Field

WWBN AVideo is an open source video platform. In versions up to and including 26.0, a sanitization order-of-operations flaw in the user profile "about" field allows any registered user to inject arbitrary JavaScript that executes when other users visit their channel page. The xssesc function...

CVE-2026-33683

WWBN AVideo is an open source video platform. In versions up to and including 26.0, a sanitization order-of-operations flaw in the user profile "about" field allows any registered user to inject arbitrary JavaScript that executes when other users visit their channel page. The xssesc function...

CVE-2023-53316 drm/msm/dp: Free resources after unregistering them

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed,...

CVE-2022-49338: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules CT cleanup assumes that all tc rules were deleted first, and so is free to delete the CT shared resources e.g the draction fwdaction which is shared for all tuples. B...

Incorrect Order of Operations in nukeFromOrbit Function

Lines of code Vulnerability details Impact the nukeFromOrbit function, the nonReentrant modifier is correctly applied. This means that the function cannot be reentered while it is already being executed the problem is that The blockAccountstate, accountAddress function is called before...

PT-2022-30630

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to the Bluetooth functionality in the Linux Kernel, specifically with the hci serdev component. It involves a potential security risk due to the order of operations, whe...

PT-2022-30137

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the Bluetooth functionality in the Linux Kernel, specifically with the hci serdev component. It involves a potential security risk due to the order of operations, wher...