13459 matches found
PT-2026-64714
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the mpl115 read raw function. The function acquires a runtime PM reference using pm runtime get sync before reading pressure or temperature...
Linux Distros Unpatched Vulnerability : CVE-2026-64494
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: light: gp2ap002: fix runtime PM leak on read error gp2ap002readraw calls pmruntimegetsync before reading the lux value, but if gp2ap002getlux fails, it...
Linux Distros Unpatched Vulnerability : CVE-2026-64493
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: pressure: mpl115: fix runtime PM leak on read error mpl115readraw takes a runtime PM reference with pmruntimegetsync before reading the processed pressure ...
PT-2026-64715
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A runtime Power Management PM leak occurs in the gp2ap002 read raw function. The function invokes pm runtime get sync to manage power before reading the lux value; however, if the gp2ap0...
PT-2026-64697
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the vfio-pci component where the disable idle d3 module parameter was handled as a global variable. When the vfio-pci module is loaded, unloaded, or reloaded with...
CVE-2026-61884
The web management interface of Tycon Systems TPDIN-Monitor-WEB2 does not perform server-side validation of credentials during the login process. By submitting empty values for both credential fields, an unauthenticated remote attacker can bypass the authentication check and establish a valid...
Budibase: SSO OAuth2 Token Leakage via User Metadata Endpoints to Power-Role Users
Summary The /api/users/metadata and /api/users/metadata/:id endpoints in @budibase/server return full global user profiles to any user with POWER role or above. For SSO-authenticated users OIDC, Google, the response includes oauth2.accessToken and oauth2.refreshToken fields, leaking identity...
CVE-2026-64246
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...
UBUNTU-CVE-2026-64246
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...
EUVD-2026-48655
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...
CVE-2026-64246
In the Linux kernel, the following vulnerability has been resolved: power: reset: linkstation-poweroff: fix use-after-free in the linkstationpoweroffinit Move ofnodeputdn after the ofmatchnode call, which still needs the node pointer. The node reference is correctly released after use...
CVE-2026-64227
Summary: CVE-2026-64227 in the Linux kernel fixes a NULL-deref/invalid match during ACPI companion probing. Root cause (as described): Platform drivers could be forced to match a device not in their ID list via device_match_driver_override(), so drivers handling core ACPI devices must verify the ...
CVE-2026-16798
Insertion of sensitive information into sent data in the automation jobs API in Devolutions PowerShell Universal 2026.2.2 and earlier allows an authenticated user with scoped job or script read permission to obtain another user's stored OAuth refresh token via job read responses that fail to stri...
PT-2026-64361
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the linkstation poweroff init function. This occurs because of node putdn is called before of match node, which still requires the node pointer. A...
PT-2026-64420
Name of the Vulnerable Software and Affected Versions Tycon Systems TPDIN-Monitor-WEB2 affected versions not specified Description The web management interface fails to perform server-side validation of credentials during the login process. An unauthenticated remote attacker can bypass the...
USN-8596-1: Linux kernel (NVIDIA) vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
The vulnerability of the cw_bat_probe() function in the drivers/power/supply/cw2015_battery.c module of the Linux kernel’s power management driver allows a hacker to cause a system failure.
The vulnerability of the cwbatprobe function in the drivers/power/supply/cw2015battery.c file of the Linux kernel’s power management driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...