696767 matches found
Libxml2 Heap Buffer Overflow DoS
The vulnerability in the xmlParseInternalSubset function within the Libxml2 library is related to improper memory usage after deallocation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-99093
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm: don't schedule deferred kernel page table freeing while booting Booting with a boot-time function tracer and a filter, for example ftrace=function...
Linux Kernel DoS
The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-99186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 x86/insn: Simplify foreachinsnprefix made foreachinsnprefix declare its ow...
Linux Distros Unpatched Vulnerability : CVE-2026-99126
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or...
PT-2026-127881
The Clean Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.20.1 due to a missing capability check on the CleanLogin Shortcode::get pages with shortcodes function hooked to the save post action. This makes it possible for authenticated attackers...
CVE-2026-118605: Stack-based Buffer Overflow
Alpine iLX-F511 prhsdpservicesearchdecode Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability to pair a...
CVE-2026-118608: Out-of-bounds Read
Alpine iLX-F511 libanwbtstack.so prhrfcommccprocesstest Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Alpine iLX-F511 devices. An attacker must first obtain the ability t...
UBUNTU-CVE-2026-99125
In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...
UBUNTU-CVE-2026-99186
In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 "x86/insn: Simplify foreachinsnprefix" made foreachinsnprefix declare its own loop counter named idx. getsegregoverrideidx keeps its result in ...
CVE-2026-99186: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in…
In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in getsegregoverrideidx Commit 45e1dccc0653 "x86/insn: Simplify foreachinsnprefix" made foreachinsnprefix declare its own loop counter named idx. getsegregoverrideidx keeps its result in ...
PT-2026-128179
In the Linux kernel, the following vulnerability has been resolved: x86/insn-eval: Fix shadowed segment index in get seg reg override idx Commit 45e1dccc0653 "x86/insn: Simplify for each insn prefix" made for each insn prefix declare its own loop counter named idx. get seg reg override idx keeps...
PT-2026-129220
A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely...
CVE-2026-118538: a2ui-project a2ui: A vulnerability was determined in a2ui-project a2ui up to 0.12.0
A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderComponentTree of the file src/0.8/ui/root.js of the component Renderer. Executing a manipulation can lead to dynamically-determined object attributes. The attack may be launched remotely...
CVE-2026-118579: D-Link DIR-505: A weakness has been identified in D-Link DIR-505 1.10B02
A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The...
PT-2026-127312
The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login handler in all versions up to and including 4.61.0. The vulnerability exists within the verify twitter callback function because after exchanging the visitor's oauth verifier for their...
Linux Distros Unpatched Vulnerability : CVE-2026-99138
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: fix use-after-free in dotcpgetsockoptTCPCCINFO dotcpgetsockopt reads icsk-icskcaops and dereferences the getinfo function pointer without rcureadlock. With...
PT-2026-127877
The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.8. This is due to missing or incorrect nonce validation on the condtext update tmpl function. This makes it possible for unauthenticated attackers...
PT-2026-127898
The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the save profile fields function that uses an isset condition at line 1119, allowing the security check to be complete...
PT-2026-127864
The Tour Booking Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'width', 'height' and 'zoom' shortcode attributes of the ttbm-hotel-map shortcode in versions up to, and including, 2.3.6 This is due to insufficient input sanitization and output escaping on user...