3154 matches found
CVE-2026-18316
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the importzip function in versions up to, and including, 1.6.0. The handler is registered on both wpajaxaction-import-zip and wpajaxnoprivaction-import-zip and on...
CVE-2026-18316
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the importzip function in versions up to, and including, 1.6.0. The handler is registered on both wpajaxaction-import-zip and wpajaxnoprivaction-import-zip and on...
CVE-2026-18316
The CVE concerns the Solace Extra WordPress plugin. A missing capability check on import_zip() in versions ≤ 1.6.0 allows an authenticated user with Subscriber-level access or higher to trigger data loss and modification via the import-zip AJAX actions (wp_ajax_action-import-zip and wp_ajax_nopri...
EUVD-2026-59897
The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the importzip function in versions up to, and including, 1.6.0. The handler is registered on both wpajaxaction-import-zip and wpajaxnoprivaction-import-zip and on...
CVE-2026-72365
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFSRREQOFFLOADCOLLECTION on the request so that collection is processed asynchronously rather than only right at the end - and also so that...
CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions...
Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections
An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...
CVE-2026-68086
A flaw was found in the Linux kernel's memory management mm/khugepaged component. A local user could trigger an edge case where unsaved changes to file data dirty folios are improperly discarded. This occurs when a file with previous writes is subjected to a specific sequence of memory advice...
UBUNTU-CVE-2026-68086
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 "mm: fs: remove filemapnrthps functions and their users" As-is, khugepaged and...
CVE-2026-68086
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 "mm: fs: remove filemapnrthps functions and their users" As-is, khugepaged and...
CVE-2026-68086
Technical details about CVE-2026-68086 are not publicly available in the provided documents. No concrete impact, affected products, versions, or fixes are specified here. Monitor for updates.
EUVD-2026-55267
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 "mm: fs: remove filemapnrthps functions and their users" As-is, khugepaged and...
CVE-2026-68086 mm/khugepaged: write all dirty file folios when collapsing
In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 "mm: fs: remove filemapnrthps functions and their users" As-is, khugepaged and...
Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: xfs: Eliminate attribute leaf freemap entries when empty Back in commit 2a2b5932db6758 “xfs: fix attribute leaf header freemap.size underflow”, Brian Foster observed that it’s possible for a small freemap at the end of the xattr...
Linux Distros Unpatched Vulnerability : CVE-2026-68086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/khugepaged: write all dirty file folios when collapsing There is no upstream commit, as this code was removed by upstream commit 044925f9b565 mm: fs: remove...
CVE-2026-7658
CVE-2026-7658 affects IBM Langflow OSS 1.0.0–1.10.3. The flaw arises from improper validation of the username field, enabling attackers to inject path traversal sequences and bypass containment checks. This can lead to severe impacts such as arbitrary directory deletion, cross-tenant data destruc...
Security Bulletin: Multiple vulnerabilities in IBM Db2 may affect IBM Storage Protect Server (CVE-2025-36384, CVE-2025-58056, CVE-2024-47072).
Summary IBM Storage Protect Server, which uses IBM Db2, may be affected by multiple vulnerabilities that could result in denial of service or the loss of confidentiality, integrity. These vulnerabilities include CVE-2024-47072, CVE-2025-36442, CVE-2025-36428, CVE-2025-36427, CVE-2025-36424,...
CVE-2026-12927
CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS Definition...
CVE-2026-12927
The CVE-2026-12927 issue affects IGSS Definition SCADA, specifically the Def.exe component. The connected sources describe a vulnerability consistent with a memory corruption problem (buffer overflow / out-of-bounds write) that could allow arbitrary code execution when a malicious CGF file is imp...