7 matches found
PYSEC-2026-3945 WsgiDAV MySQL provider has a blind SQL injection
Summary The sample MySQLBrowserProvider builds its SQL queries by concatenating strings, and the record key from the request URL goes straight into the WHERE clause with no escaping. Any user who can reach a share backed by this provider can inject SQL through the URL. Since these read shares are...
CVE-2026-80592
A flaw was found in the Linux kernel. A local user could trigger a kernel warning by enabling the mtier sample module before its address range parameters are properly initialized. This issue, caused by invalid address range parameters, could lead to system instability or a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-80592
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: samples/damon/mtier: fail early if address range parameters are invalid The comment on top o...
Linux Distros Unpatched Vulnerability : CVE-2026-74643
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/damon/mtier: error out for zero quota goal target values Patch series mm/damon: avoid division by zero from damosquotascore. DAMONSAMPLEMTIER and...
CVE-2026-64075: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregisterfprobe to wait for RCU grace period Commit 4346ba1604093 "fprobe: Rewrite fprobe on function-graph tracer" changed fprobe to register struct fprobe to an rcu-hlist, but it forgot to wait for RCU GP. Thus the...
