CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101145

A vulnerability exists in Eleveo Call Recording Software 9.7.0 within the User Management component. Specifically, the file /callrec/userAddAction.do is susceptible to ldap injection due to the improper handling of the Username argument. This flaw can be exploited remotely . An exploit is publicl...

EUVD-2026-88480

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-101145 Eleveo Call Recording Software User Management userAddAction.do ldap injection

A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown code of the file /callrec/userAddAction.do of the component User Management. Such manipulation of the argument Username leads to ldap injection. The attack can be executed remotely. The...

CVE-2026-98012

A flaw was found in the Linux kernel's Stochastic Fairness Queueing SFQ network packet scheduling subsystem. A local attacker with network administration privileges, including within an unprivileged user namespace, can supply an improperly bounded quantum parameter alongside a crafted packet size...

CVE-2026-98011

A flaw was found in the Linux kernel's Heavy-Hitter Filter HHF network scheduler. A local attacker with network administration privileges, which can be acquired within an unprivileged user namespace, can cause a Denial of Service DoS. By setting an excessively small quantum value alongside a...

CVE-2026-98008

A flaw was found in the Linux kernel's Cadence MACB ethernet driver. A local user with administrative privileges could cause a denial of service DoS by triggering a driver unbind operation or an initialization failure on a device configured with a fixed-link connection. In this configuration, the...

CVE-2026-97529

A flaw was found in the Linux kernel's qla2xxx driver. The driver fails to validate the length of vendor-specific request buffers before reading command data, resulting in an out-of-bounds read from heap memory. A local user with administrative privileges can exploit this flaw by submitting a...

CVE-2026-93355

A flaw was found in LiteLLM. This vulnerability allows an authenticated remote attacker to achieve privilege escalation and account takeover by presenting a valid JSON Web Token JWT containing an unverified email address that matches an existing user account. Because the authentication process...

CVE-2026-101144 Eleveo Call Recording Software Query Builder searchAction.do access control

A vulnerability was determined in Eleveo Call Recording Software 9.7.0. This affects an unknown part of the file /callrec/searchAction.do of the component Query Builder. This manipulation causes improper access controls. Remote exploitation of the attack is possible. The exploit has been publicly...

EUVD-2026-88466

A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scorecard.webui.Scorecard/QMBODownload. The manipulation results in information disclosure. The attack may be launched...

CVE-2026-101143 Eleveo Quality Management QMBODownload information disclosure

A vulnerability was found in Eleveo Quality Management 9.7.0. Affected by this issue is some unknown functionality of the file /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scorecard.webui.Scorecard/QMBODownload. The manipulation results in information disclosure. The attack may be launched...

CVE-2026-101143

A vulnerability exists in Eleveo Quality Management 9.7.0 involving the file /qm/cz.zoom.scorecard.webui.Scorecard/cz.zoom.scorecard.webui.Scorecard/QMBODownload . Manipulation of this component can lead to information disclosure . This attack can be launched remotely , and the exploit has been m...

EUVD-2026-88463

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

CVE-2026-101142 Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal

A vulnerability has been found in Eleveo Quality Management 9.7.0. Affected by this vulnerability is an unknown functionality of the file Scorecard.jsp of the component Questionnaire Audio Upload. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been...

CVE-2026-101142

A path traversal vulnerability exists in the Questionnaire Audio Upload component of Eleveo Quality Management 9.7.0 . The flaw is located within the Scorecard.jsp file, where improper handling of input allows for directory traversal. This vulnerability can be triggered remotely. While the exploi...

CVE-2026-98005

A flaw was found in the Linux kernel's EROFS Enhanced Read-Only File System component. Due to a missing delimiter between the domain identifier and fingerprint when generating cache keys for shared inodes, the resulting cache entries are ambiguous. A local user could exploit this ambiguity to cau...

CVE-2026-84894

In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidates the handle under proxygen's WebTransport API. A remote peer can trigger the stale use by opening a data stream that names an unknown track alias and carrie...

CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...

DEBIAN-CVE-2026-13018

Insufficient validation of untrusted input in Codecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially perform out of bounds memory access via a crafted video file. Chromium security severity: Low...