EUVD-2026-98551

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

CVE-2026-109406

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

PT-2026-118157

Уязвимость веб-платформы для совместной работы и управления документами Microsoft Office SharePoint связана с ошибками проверки криптографической подписи. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

CVE-2026-110224: Improper Neutralization of Input During Web Page Generation

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave that echoes rejected alias and search values unescaped in validation errors. Attackers can induce an authenticated back-office user to submit a crafted request, executing...

CVE-2026-109406: Undefined Security Weakness

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument couponamount/payamount causes business logic errors. The attack is...

ROS-20261013-73-0115

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Network Service Compromise Data Compromise

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to authorization errors. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

DevTools Suite Protected Information Access

The vulnerability in Google Chrome and Microsoft Edge DevTools web development tools is related to authorization errors. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

ROS-20261013-73-0392

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0500

The vulnerability of the clk-rcg2.c component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

ROS-20261013-73-0057

The vulnerability of the drivers/hid/hid-playstation.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0496

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information...

Network Service Compromise Data Compromise

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to authorization errors. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

DevTools Suite Protected Information Access

The vulnerability in Google Chrome and Microsoft Edge DevTools web development tools is related to authorization errors. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

ROS-20261013-73-0053

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0182

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0245

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-97138

A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument totalamount results in business logi...