381593 matches found
CVE-2026-47587: Use After Free
NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering...
CVE-2026-79625: Concurrent Execution using Shared Resource with Improper Synchronization
Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...
PT-2026-103536
Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0 Description A stored SQL injection exists within an administrative reporting feature. This issue allows an authenticated administrator to read sensitive data from the underlying database and potentially...
Linux Distros Unpatched Vulnerability : CVE-2026-102300
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...
PT-2026-103218
Subscriber Sensitive Data Exposure in GiveWP = 4.16.9 versions...
PT-2026-103054
The WP Directory Kit plugin for WordPress is vulnerable to generic SQL Injection via the 'data fields list' parameter in all versions up to, and including, 1.5.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...
PT-2026-103102
Information disclosure in BVMS 4.5 up to 12.3 including allows man-in-the-middle attackers to gain unauthorized access to sensitive data...
PT-2026-103237
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
ROS-20260930-73-0130
The vulnerability of the auditclassesinit function in the lib/audit.c module of the Linux kernel is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-97302: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in MPG = 4.2.3 versions...
CVE-2026-103237: Authorization Bypass Through User-Controlled Key
MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...
CVE-2026-96342: Missing Authorization
Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Retrieve Embedded Sensitive Data.This issue affects WPMobile.App: from n/a through 11.83...
CVE-2026-102140: Insufficient Verification of Data Authenticity
An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the...
CVE-2026-102125: Improper Isolation or Compartmentalization
The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could...
CVE-2026-47497: Time-of-check Time-of-use (TOCTOU) Race Condition
NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor GSP tracing component where a guest VM user may cause improper access by sending crafted data through a shared buffer. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...
CVE-2026-47516: Use After Free
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...
CVE-2026-97241: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...
CVE-2026-96833: Deserialization of Untrusted Data
Editor PHP Object Injection in Ultimate Addons for Contact Form 7 = 3.5.51 versions...