Frappe 代码问题漏洞

Frappe is a web development framework based on Python and Mariadb, with integrated front-end pages, developed by the Indian company Frappe. There are code-related vulnerabilities in versions prior to Frappe 14.100.1, 15.100.0, and 16.6.0. These vulnerabilities allow malicious requests to cause th...

The vulnerability of the q6apm_lpass_dai_prepare() function in the sound/soc/qcom/qdsp6/q6apm-lpass-dais.c file, which is part of the Linux SoC audio support module, allows a hacker to cause a system failure.

The vulnerability of the q6apmlpassdaiprepare function in the sound/soc/qcom/qdsp6/q6apm-lpass-dais.c file, which is related to the sound support for Linux operating system SoCs, involves a pointer manipulation issue. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerabilities of the functions `lock_pages()` and `privcmd_ioctl_dm_op()` in the `drivers/xen/privcmd.c` module of the Linux kernel device driver framework allow a attacker to cause a service failure.

The vulnerabilities of the functions lockpages and privcmdioctldmop in the drivers/xen/privcmd.c module of the Linux kernel device driver for page buffer management are related to the use of pointers. Exploiting these vulnerabilities could allow a remote attacker to cause service interruptions...

The vulnerability of the sprintf function in the microprogramming software for Tenda W20E routers allows a hacker to cause a service failure.

The vulnerability of the sprintf function goform/formDelWewifiPic in the microprogramming software for Tenda W20E routers stems from the operation that goes beyond the buffer boundaries in memory when processing the picName parameter. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the gss_read_proxy_verf() function in the net/sunrpc/auth_gss/svcauth_gss.c module of the RPC protocol implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the gssreadproxyverf function in the net/sunrpc/authgss/svcauthgss.c module of the RPC protocol implementation in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rendering of RSE metadata in the WebUI. An attacker can execute arbitrary JavaScript in the users' context by injecting malicious scripts into the City, CountryName, or ISP fields, which are then stored...

The vulnerability in the libvpx component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the libvpx component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

CVE-2026-2464 Directory Traversal in AMR Printer Management by AMR

Path traversal vulnerability in the AMR Printer Management 1.01 Beta web service, which allows remote attackers to read arbitrary files from the underlying Windows system by using specially crafted path traversal sequences in requests directed to the web management service. The service is...

The vulnerability of microprogrammed software in ABB devices, related to errors in verifying the cryptographic signature, allows a perpetrator to trigger a service failure.

The vulnerability of microprogramming software in ABB devices is related to errors in checking the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system server is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2026-20307

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists in the management API that could allow a remote attacker without authentication to initiate service restarts. Exploitation of this issue may lead ...

The vulnerabilities of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to pointer manipulation, allow attackers to trigger service failures.

The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to pointer manipulation. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the GDI+ component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the GDI+ component in the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

The vulnerability of the ReadMVGImage function in the coders/mvg.c component of the console image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadMVGImage function in the coders/mvg.c component of the console image editing tool ImageMagick involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the f2fs_alloc_nid() function in the fs/f2fs/node.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the f2fsallocnid function in the fs/f2fs/node.c module of the F2FS file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the ov5675_init_controls() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ov5675initcontrols function in the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the copy_highpage() function in the arch/arm64/mm/copypage.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the copyhighpage function in the arch/arm64/mm/copypage.c module of the Linux operating system’s ARM 64-bit kernel supports is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a remote attacker to cause...

The vulnerability of the ntfs_new inode() function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ntfsnew inode function in the fs/ntfs3/fsntfs.c file of the NTFS file system in the Linux operating system is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability in the ` adreno_gpu_init()` function of the `drivers/gpu/drm/msm/adreno/adreno_gpu.c` file, a driver for the Direct Rendering Infrastructure (DRI) of the Linux operating system’s kernel, allows a malicious actor to cause a service failure.

The vulnerability of the adrenogpuinit function in the drivers/gpu/drm/msm/adreno/adrenogpu.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the assignment of a NULL pointer. Exploiting this vulnerability can allow an attacker to cause a servic...

Vulnerability of the __ocfs2MoveExtent() function in the fs/ocfs2/move_extents.c module of the OCFS2 file system in the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the ocfs2MoveExtent function in the fs/ocfs2/moveextents.c file of the OCFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...