321224 matches found
EUVD-2026-59646
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submission time and recycled as jobs complete, without ever being cleared. Ea...
CVE-2026-74453 drm/vc4: Zero the tile state data array before each BIN job
In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer split into 512KB slots that are handed out to jobs at submission time and recycled as jobs complete, without ever being cleared. Ea...
CVE-2026-12248
The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2026-12248 WPML Multilingual CMS <= 4.9.5 - Authenticated (Translator+) SQL Injection via 'sorting' Parameter
The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...
CVE-2026-73632
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
CVE-2026-73632 Apache Struts: Shared serialization state in the JSON plugin
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
CVE-2026-73632
Apache Struts 7.2.1's JSON plugin shares per-response serialization state across concurrent requests, letting one user observe another's response content. Only the SMD/JSON-RPC interceptor path is affected; it is disabled by default. No in-the-wild exploitation is reported. Upgrade to 7.3.0. See ...
EUVD-2026-59606
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests, allowing response content associated with one request to become observable in another. Only the SMD / JSON-RPC handling of the...
EUVD-2026-59605
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...
CVE-2026-73631
Apache Struts 7.2.1's JSON plugin shares per-request parsing state across concurrent requests, allowing one user's JSON-parsed data to leak into another's session and bypassing configured parsing limits. Affected deployments are those using JSON request body population. Upgrade to Struts 7.3.0. N...
CVE-2026-73631 Apache Struts: Shared parsing state in the JSON plugin
Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowing data associated with one request to become observable in another, and configured parsing limits not to be enforced as intende...
MINI-3MP9-MJ4F-3696
Bulletin has no description...
MINI-P249-J2GC-R3FC
Bulletin has no description...
MINI-4577-W7WG-8V9J
Bulletin has no description...
MINI-4MVW-JFHM-M844
Bulletin has no description...
MINI-QG3P-37FM-FQ9Q
Bulletin has no description...
MINI-288C-P7Q7-27QF
Bulletin has no description...
MINI-J7RM-XVGQ-WHR6
Bulletin has no description...
