8767 matches found
PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting
A vulnerability was found in PHP Jabbers Bus Reservation System 1.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument index/pickupid leads to cross site scripting. The attack may be launched remotely. id:...
CVE-2026-64501
A flaw was found in the Linux kernel's adsigmadelta driver for analog-to-digital converters ADCs. This vulnerability occurs when the Chip Select CS line, which controls communication with the ADC, remains asserted after a conversion or in an error state. This can prevent other devices on the Seri...
CVE-2026-64329
A flaw was found in the Linux kernel's USB Type-C UCSI CCG driver. A use-after-free vulnerability occurs during the removal of a USB Type-C device. Specifically, the system attempts to free a memory object before ensuring that all related interrupt handling routines have completed. This timing...
CVE-2026-64453
A flaw was found in the Linux kernel's USB subsystem, specifically within the usbio module. This vulnerability, known as a use-after-free UAF, occurs when the system attempts to access memory that has already been released during the disconnection of a USB device. A local attacker or a specially...
DEBIAN-CVE-2026-17868
Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50926
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-18000
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-18000
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-64463
A flaw was found in the Linux kernel's USB Type-C subsystem, specifically within the tcpcirt1711h driver. When a USB Type-C port is initialized, the system may fail to properly unregister the port if certain setup steps do not complete successfully. This oversight in resource management could lea...
CVE-2026-17868
Insufficient policy enforcement in USB in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13307 Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...
EUVD-2026-50559
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...
CVE-2026-13307
Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to explo...
CVE-2026-13306
Autel MaxiCharger AC Elite Home EV chargers are affected by CVE-2026-13306: a flaw in the exposed USB interface allows physically present attackers to bypass authentication without prior authentication. The issue stems from lack of authentication before accessing functionality, enabling bypass on...
Security Bulletin: IBM Integration Bus for z/OS is vulnerable to Improper Handling of URL Encoding and Insufficient Technical Documentation due to Apache Tomcat (CVE-2026-59083 & CVE-2026-59084)
Summary IBM Integration Bus for z/OS is vulnerable to Improper Handling of URL Encoding and Insufficient Technical Documentation due to Apache Tomcat. Vulnerability Details CVEID:CVE-2026-59083 DESCRIPTION: Improper Handling of URL Encoding Hex Encoding vulnerability in Apache Tomcat's rewrite...
CVE-2026-64505
A flaw was found in the Linux kernel's USB RNDIS gadget function. A missing length check for the RNDIS header in the rndisrmhdr function could allow an attacker to read data beyond the intended buffer. This out-of-bounds read vulnerability could lead to information disclosure or potentially a...
CVE-2026-64344
A flaw was found in the Linux kernel's USB idmouse driver. A local attacker could exploit a use-after-free vulnerability due to a race condition that occurs when a USB idmouse device is disconnected. This race condition allows mutexunlock to access freed memory, which can lead to a system crash a...
CVE-2026-64348
A flaw was found in the Linux kernel's Universal Serial Bus USB subsystem. When an isochronous USB request block URB submission fails, the associated schedule is not properly freed. This memory leak can accumulate over time, potentially leading to memory exhaustion and a denial of service DoS for...
CVE-2026-64478
A flaw was found in the Linux kernel's ALSA USB audio driver, specifically affecting DualSense controllers. A local attacker with physical access to a DualSense controller could exploit this by rapidly disconnecting and reconnecting the device due to a weak physical connection. This action can...