13493 matches found
CVE-2026-97611 net: openvswitch: fix use-after-free of the flow table mask array
In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array tblmaskarrayrealloc retires the old maskarray before it stops being reachable: old = ovsldereferencetbl-maskarray; if old ... callrcu&old-rcu, maskarrayrcucb;...
CVE-2026-97579
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...
CVE-2026-96752
The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...
CVE-2026-96752 Zero Spam for WordPress <= 5.7.10 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration
The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...
CVE-2026-96752
The Zero Spam for WordPress plugin for WordPress (versions up to and including 5.7.10 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the Contact Form 7 integration . An unauthenticated attacker can submit a Conta...
CVE-2026-96752 Zero Spam for WordPress <= 5.7.10 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration
The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...
EUVD-2026-86589
The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...
Linux Distros Unpatched Vulnerability : CVE-2026-98153
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme: fix racy access to FDP placement id array nvmequeryfdpinfo is called per-path and therefore prone to races. It populates head-nrplids/head-plids for fdp...
PT-2026-98812
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where bpf map check op flags incorrectly validates the target CPU ID stored in the upper 32 bits of map operation flags when BPF F CPU is used. The...
ROS-20260925-73-0011
The vulnerability of the tuningctlset function in the sound subsystem of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...
PT-2026-98811
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding per-CPU map updates for array, hash, and cgroup storage maps when BPF F CPU or BPF F ALL CPUS are not used. The syst...
Linux Distros Unpatched Vulnerability : CVE-2026-97930
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usbusx2y: fix in04last array size mismatch with in04buf The in04last array in struct usx2ydev is declared as char24, but in04buf is allocated as...
CVE-2026-98088: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumaskofnode call in baseassignreplyqueues devtonode can return NUMANONODE -1 on systems without NUMA topology information for the PCI device, such as single-socket boards that don't expose...
CVE-2026-96752: Improper Neutralization of Input During Web Page Generation
The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration in all versions up to, and including, 5.7.10 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticat...
SUSE CVE-2026-97423
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...
CVE-2026-96883 Type confusion in AWS pgcollection allows remote code execution
pgcollection is an open source extension to PostgreSQL. A type confusion issue in AWS pgcollection 2.0.0 through 2.1.1 might allow an authenticated remote user to execute arbitrary code as the postgres operating system user via crafted SQL statements that rely on mismatched type metadata in...
AZL-103835 CVE-2026-97423 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...
CVE-2026-97423
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...
DEBIAN-CVE-2026-97423
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...
UBUNTU-CVE-2026-97423
In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...