The vulnerability of the `cros_ec_codec_platform_probe()` function in the `sound/soc/codecs/cros_ecCodec.c` module allows a hacker to cause a system failure in the Linux operating system’s SoC audio kernel.

The vulnerability of the croseccodecplatformprobe function in the sound/soc/codecs/crosecCodec.c module, which is part of the Linux operating system’s SoC audio support, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the mt6797_mt6351_dev_probe() function in the sound module/soc/mediatek/mt6797/mt6797-mt6351.c file, which is part of the Linux operating system’s sound support for SoC cores, allows a hacker to cause a service failure.

The vulnerability of the mt6797mt6351devprobe function in the sound module/soc/mediatek/mt6797/mt6797-mt6351.c file, which is related to Linux operating system SoC sound support, is associated with errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the mt8173_rt5650_dev_probe() function in the sound module/soc/mediatek/mt8173/mt8173-rt5650.c file, which is part of the Linux operating system’s sound support for SoC cores, allows a hacker to cause a service failure.

The vulnerability of the mt8173rt5650devprobe function in the sound module/soc/mediatek/mt8173/mt8173-rt5650.c file, which is related to the Linux operating system’s sound support for SoC cores, is associated with errors during link counter updates. Exploiting this vulnerability could allow an...

The vulnerability of the imx_rproc_addr_init() function in the drivers/remoteproc/imx_rproc.c file of the Linux operating system’s remote processor subsystem allows a hacker to cause a service failure.

The vulnerability of the imxrprocaddrinit function in the drivers/remoteproc/imxrproc.c file of the Linux kernel’s remote processor subsystem is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the p9_read_work() function in the net/9p/trans_fd.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the p9readwork function in the net/9p/transfd.c module of the Linux kernel is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mt8173_rt5650_rt5676_dev_probe() function in the sound module/soc/mediatek/mt8173/mt8173-rt5650-rt5676.c file, which is part of the Linux operating system’s sound support for SoC cores, allows a hacker to cause a service failure.

The vulnerability of the mt8173rt5650rt5676devprobe function in the sound module/soc/mediatek/mt8173/mt8173-rt5650-rt5676.c file, which is related to the Linux operating system’s sound support for SoC cores, is associated with errors during link counter updates. Exploiting this vulnerability coul...

The vulnerability of the ast_vhub_initDesc() function in the drivers/usb/gadget/udc/aspeed-vhub/hub.c file of the Linux kernel’s USB device driver allows a attacker to cause a service failure.

The vulnerability of the astvhubinitdesc function in the drivers/usb/gadget/udc/aspeed-vhub/hub.c file of the Linux kernel’s USB device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the dvb_usb_adapter_init() function in the drivers/media/usb/dvb-usb/dvb-usb-init.c file of the multimedia device driver module for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the dvbusbadapterinit function in the drivers/media/usb/dvb-usb/dvb-usb-init.c file of the Linux operating system’s multimedia device driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the `usbhs_rza1_hardware_init()` function in the `drivers/usb/renesas_usbhs/rza.c` driver for Linux kernel USB devices allows a hacker to induce a service failure.

The vulnerability of the usbhsrza1hardwareinit function in the drivers/usb/renesasusbhs/rza.c driver for Linux USB device controllers is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the q6v5_alloc_memory_region() function in the drivers/remoteproc/qcom_q6v5_mss.c module of the Linux kernel’s remote processor subsystem support driver allows a attacker to cause a service failure.

The vulnerability of the q6v5allocmemoryregion function in the drivers/remoteproc/qcomq6v5mss.c module of the Linux kernel’s remote processor subsystem support driver is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the BPF_CALL_3() function in the net/core/filter.c module allows a hacker to trigger a service failure. This vulnerability is related to the support for kernel network functions in the Linux operating system.

The vulnerability of the BPFCALL3 function in the net/core/filter.c module related to Linux kernel network functions is associated with errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

WordPress Simple Download Counter plugin <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'text' Shortcode Attribute vulnerability discovered by zaim in WordPress Plugin Simple Download Counter versions = 2.3...

The vulnerability of the interruptcntprobe() function in the drivers/counter/interrupt-cnt.c module of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the interruptcntprobe function in the drivers/counter/interrupt-cnt.c module of the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

GHSA-XRF2-5R3P-5WGJ libcrux: Panic in Signature Hint Decoding During Verification

During ML-DSA verification the serialized hint values are decoded as specified in algorithm 22 HintBitUnpack of FIPS 204, subsection 7.1. The algorithm requires that the cumulative hint counters per row of the hint vector are strictly increasing and below a maximum value which depends on the choi...

EUVD-2026-16098

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdcmenu' shortcode in all versions up to, and including, 2.3. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes, specifically the 'text' an...

CVE-2026-4278 Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdcmenu' shortcode in all versions up to, and including, 2.3. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes, specifically the 'text' an...

CVE-2026-4278 Simple Download Counter <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdcmenu' shortcode in all versions up to, and including, 2.3. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes, specifically the 'text' an...

CVE-2026-4278

The CVE-2026-4278 entry concerns the WordPress plugin Simple Download Counter, vulnerable to Stored Cross-Site Scripting via the sdc_menu shortcode in versions up to 2.3. The root cause is insufficient input sanitization and output escaping on user-supplied shortcode attributes, specifically text...

PT-2026-28200

The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc menu' shortcode in all versions up to, and including, 2.3. This is due to insufficient input sanitization and output escaping on user-supplied shortcode attributes, specifically the 'text' a...

The vulnerability of the __bpf_sk_lookup() function in the net/core/filter.c module exposes network functions of the Linux operating system, allowing a hacker to cause a service failure.

The vulnerability of the bpfsklookup function in the net/core/filter.c module related to Linux kernel’s networking functions is associated with errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...