24837 matches found
CVE-2026-59240
The CVE-2026-59240 vulnerability is an IDOR in Prospero Flow CRM. Affected code path: DeleteNotificationController::delete() at GET /notification/delete/{id}. It allows any authenticated user to delete notifications belonging to any user because the target record is fetched with Notification::fin...
CVE-2026-64541 net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smccdcrxhandler by pinning the socket smccdcrxhandler looks up the connection by token under the link group's connslock, drops the lock, and then dereferences conn and the smcsock derived from it, ending in...
EUVD-2026-49592
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smccdcrxhandler by pinning the socket smccdcrxhandler looks up the connection by token under the link group's connslock, drops the lock, and then dereferences conn and the smcsock derived from it, ending in...
MINI-95GQ-J7JJ-V6W9
Bulletin has no description...
MINI-2VWV-9GX5-CXRV
Bulletin has no description...
MINI-R73H-RX98-4M9G
Bulletin has no description...
MINI-CWC3-Q264-MX6V
Bulletin has no description...
MINI-CXHV-7C9F-VC58
Bulletin has no description...
MINI-4X92-9C42-V5QF
Bulletin has no description...
MINI-87MX-HPHH-XJ8F
Bulletin has no description...
MINI-26MG-3WGJ-4JCQ
Bulletin has no description...
CGA-7F98-J55X-R3X6
Bulletin has no description...
GHSA-4J38-RW27-97GX org.xwiki.contrib:discussions-server has Cross-Site Request Forgery (CSRF) issue that makes it possible to delete messages
Impact It's possible to forge a request to delete a message. Patches The problem has been patched in version 2.0-rc-1 of Discussion Extension. Workarounds There's no easy workaround except upgrading. References https://jira.xwiki.org/browse/DISCUSSION-22 For more information If you have any...
SUSE CVE-2026-64534
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INITFAILED before nvmetrequninit in digest error path In nvmettcptryrecvddgst, when a data digest mismatch is detected, nvmetrequninit is called unconditionally. However, if the command arrived via the...
SUSE CVE-2026-64535
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar found via vulnerability testing: When data digest is enabled on an NVMe/TCP connection and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based data...
CVE-2026-64535
A use-after-free flaw was found in the Linux kernel's NVMe-over-Fabrics TCP target nvmet-tcp driver. When NVMe/TCP data digest is enabled and a digest mismatch occurs on a non-final H2CDATA PDU during an R2T-based write transfer, the digest error handler in nvmettcptryrecvddgst calls...
MINI-QW4R-VP4G-MMFH
Bulletin has no description...
MINI-M4R2-JQRQ-26GH
Bulletin has no description...