21004 matches found
CVE-2025-13394
The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...
CVE-2025-13394 Cross-Site Request Forgery via Ajax Processor Endpoints in Multiple WSO2 Products Enables Unauthorized Actions
The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...
CVE-2025-13394
The CVE-2025-13394 entry describes a CSRF issue in the Carbon console's Ajax processor. State-changing operations are performed via HTTP GET, and while SameSite=Lax cookies are used, this mitigation is bypassed for cross-origin top-level navigation, allowing an authenticated user’s browser to tri...
CVE-2025-13394
The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...
CVE-2024-6832 Account Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks
The account locking mechanism fails to trigger when secondary user stores are inaccessible. The software does not maintain a consistent state for account locking if it cannot reach all configured user stores, allowing an attacker to repeatedly attempt authentication with invalid credentials witho...
CVE-2026-64587 net: ethernet: arc: emac: quiesce interrupts before requesting IRQ
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...
CVE-2026-14829 Checkimate <= 1.0.13 - Unauthenticated License Deactivation via Hardcoded Secret
The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionality, relying on a shared secret computed entirely from publicly available information, allowing unauthenticated...
CVE-2026-14829
The Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin through 1.0.13 does not properly restrict access to its license-management functionality, relying on a shared secret computed entirely from publicly available information, allowing unauthenticated...
github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially...
PT-2026-68728
Name of the Vulnerable Software and Affected Versions llama.cpp versions b4882 through b9058 Description A heap buffer overflow exists in the KV cache state restore path. The state read data function calculates the write size without performing overflow checks. An attacker with write access to th...
Quantum One-Way Functions and Related Cryptographic Primitives
Quantum cryptographic primitives beyond key distribution remain a less well understood area of research. In classical cryptography, one-way functions underpin nearly all standard cryptographic protocols, motivating the search for meaningful quantum analogues and for a clear understanding of the...
The vulnerability of the dwcmshc_rk3568_set_clock() function in the drivers/mmc/host/sdhci-of-dwcmshc.c driver for MMC/SD/SDIO cards in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the dwcmshcrk3568setclock function in the drivers/mmc/host/sdhci-of-dwcmshc.c driver for MMC/SD/SDIO cards in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-68729
Name of the Vulnerable Software and Affected Versions llama.cpp versions b5702 through b7653 Description An out-of-bounds read exists in the recurrent memory state restore path. Attackers with write access to the slot save directory can craft a malicious slot file containing an oversized seq id...
PT-2026-68772
Name of the Vulnerable Software and Affected Versions macOS Tahoe versions prior to 26.6.1 macOS Sequoia versions prior to 15.7.9 macOS Sonoma versions prior to 14.8.9 Description An authentication bypass exists in the built-in Screen Sharing functionality, which allows a network attacker to...
ROS-20260806-73-0035
The vulnerability of the bamdmaprobe function in the drivers/dma/qcom/bamdma.c file of the Linux kernel’s DMA driver module is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
PT-2026-68395
Name of the Vulnerable Software and Affected Versions Checkimate — WooCommerce Checkout, Abandoned Cart Recovery & Order Bumps WordPress plugin versions prior to 1.0.14 Description Insufficient access restrictions in the license-management functionality allow unauthenticated attackers to deactiva...
PT-2026-68442
Name of the Vulnerable Software and Affected Versions Carbon console affected versions not specified Description The Ajax processor fails to protect state-changing operations from Cross-Site Request Forgery CSRF, a type of attack that tricks an authenticated user into executing unintended actions...
The vulnerabilities of the functions uacce_put_queue() and uacce_fops_unl_ioctl() in the drivers/misc/uacce/uacce.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...
About the security content of macOS Sequoia 15.7.9
About the security content of macOS Sequoia 15.7.9 This document describes the security content of macOS Sequoia 15.7.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of macOS Tahoe 26.6.1
About the security content of macOS Tahoe 26.6.1 This document describes the security content of macOS Tahoe 26.6.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...