305833 matches found
CVE-2026-112142
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...
CVE-2026-103314
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and...
CVE-2026-98510
A flaw was found in the Linux kernel's Intel Xe graphics driver. When closing a GPU virtual memory space, page tables were destroyed before contested virtual memory areas were properly unlinked from shared buffer objects. A concurrent thread evicting a shared buffer object can attempt to access t...
CVE-2026-112142 satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...
EUVD-2026-104261
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...
CVE-2026-112142
A SQL injection vulnerability exists in the Registration-Delete Handler component of the satya-vinay Events-Management-System (up to commit 437c77ceb69bf9fe2e3f4f46f7871b83f425383a). The flaw is located within an unknown functionality of the dodelete.php file, where manipulation of the ID argumen...
CVE-2026-112142 satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection
A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of the file dodelete.php of the component Registration-Delete Handler. Such manipulation of the argument ID leads to sq...
CVE-2026-98446
A flaw was found in the Linux kernel's XFS file system. When calculating space reservations for file system metadata, the kernel does not prevent an arithmetic underflow if the available reservable blocks drop below the amount already in use. A local user could exploit this condition during file...
CVE-2026-40369
๐จ CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. ๐ Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...
CVE-2026-98502
A flaw was found in the Linux kernel's ALPS Human Interface Device HID driver. The driver fails to properly unregister and release a secondary input device when the hardware is removed. A local user could exploit this issue by repeatedly disconnecting the device, causing a memory leak that can le...
CVE-2026-112138
A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can lead to path traversal. The attack can be launched remotely...
CVE-2026-112139
A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindocview.php of the component Administrative Mutation Handler. The manipulation of the argument docid leads to sql...
CVE-2026-112108
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file thirdparty/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit ha...
CVE-2026-112140
A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...
CVE-2026-112107
A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotel...
CVE-2026-98506
A flaw was found in the Linux kernel's HugeTLB Huge Translation Lookaside Buffer subsystem. This flaw allows a local user to cause a Denial of Service DoS by triggering the dissolution of gigantic memory pages that lack runtime support. Because the kernel fails to verify runtime support before...
CVE-2026-98504
A flaw was found in the Linux kernel's PCI subsystem. When generating dynamic Open Firmware OF device tree properties, the kernel fails to verify that a subordinate bus exists for a PCI bridge before accessing its configuration. A local attacker or physical device configuration can trigger this...
CVE-2026-98443
A flaw was found in the Linux kernel's XFS file system. Improper pointer handling during the recovery of unlinked files can cause a use-after-free condition, where the operating system attempts to access memory after it has already been freed. A local user capable of mounting a specially crafted...
CVE-2026-103314 Stackrox: stackrox: saml response replay allows multiple central authentication tokens
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and...
EUVD-2026-104252
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and...