WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting

WordPress Select All Categories and Taxonomies plugin before 1.3.2 contains a cross-site scripting vulnerability. The settings page of the plugin does not properly sanitize the tab parameter before outputting it back. An attacker can inject arbitrary script in the browser of an unsuspecting user ...

Radio Player <= 2.0.82 - Server-Side Request Forgery

The Radio Player Live Shoutcast, Icecast and Any Audio Stream Player for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.0.82. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations...

CVE-2026-68215

A flaw was found in the Linux kernel's radio-si476x media driver. During the device probing process, if certain initialization steps fail, the v4l2device may not be properly unregistered. This oversight can lead to a resource leak, specifically a persistent parent device reference. A local attack...

CVE-2026-68215

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...

UBUNTU-CVE-2026-68215

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...

EUVD-2026-55316

In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering the video device. If any of those later steps fails, probe returns...

CVE-2026-68215

CVE-2026-68215 concerns the Linux kernel media subsystem for the si476x radio. The issue arises in si476x_radio_probe(): it registers v4l2dev before allocating V4L2 controls and before video device registration. If subsequent steps fail, the probe exits via the error path after freeing only the c...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fixed a deadlock between nfcunregisterdevice and rfkillfopwrite. A deadlock can occur between nfcunregisterdevice and rfkillfopwrite due to the inverted lock order between devicelock and rfkillglobalmutex. The problemat...

Linux Distros Unpatched Vulnerability : CVE-2026-68215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: radio-si476x: Unregister v4l2device on probe failure si476xradioprobe registers radio-v4l2dev before allocating the V4L2 controls and before registering...

CVE-2025-71413

Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71412

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71409

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71409

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71410

The CVE-2025-71410 issue affects systems handling Aviation Very High Frequency Link Control (VHF L-C) and Unnumbered Disconnect (U DISC) frames used by CPDLC. Described vulnerability can terminate sessions and cause loss of CPDLC functions, forcing a reversion to voice comms and increasing contro...

CVE-2025-71411 In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71411

The CVE-2025-71411 entry describes a CPDLC-related issue where broadcast control frames can remotely disconnect multiple aircraft, causing delayed clearances and ATC overload. Affected component is broadcast/control frames in CPDLC; root cause and vendor/version details are not specified in the p...

EUVD-2025-210652

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71412 In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...

EUVD-2025-210651

Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency...

CVE-2025-71413

The CVE-2025-71413 issue involves malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers, leading to repeated resets. Reported impact is increased workload and reduced situational awareness, with the attack described as remotely carryable over radio frequ...