23684 matches found
SUSE CVE-2026-12044
SQL injection in pgAdmin 4 across every dialog template that renders COMMENT ON ... IS '' for a user-supplied description field. The Jinja templates for Domains and their constraints, Foreign Tables, Languages, and Event Triggers, plus the Views OID-lookup query, interpolated the description...
CVE-2026-56212
creationtimestamp| type| source ---|---|--- 2026-06-20 01:54:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mooqs3vvsg2q...
Oracle Linux 8 : kernel (ELSA-2026-26427)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-26427 advisory. - wifi: mac80211: remove station if connection prep fails Jose Ignacio Tornos Martinez RHEL-180120 CVE-2026-46125 - wifi: mac80211: drop stray 'static...
CVE-2017-20274
creationtimestamp| type| source ---|---|--- 2026-06-19 17:56:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monw3kez562g...
CVE-2017-20273
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with...
CVE-2026-56142
creationtimestamp| type| source ---|---|--- 2026-06-19 16:35:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monrkomijt2z 2026-06-20 14:01:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mopzg6xmjp2d 2026-06-26 13:45:05+00:00| seen|...
CVE-2017-20273 Joomla Event Registration Pro Calendar 4.1.3 SQL Injection
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with...
EUVD-2017-19000
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with...
CVE-2017-20273
CVE-2017-20273 affects Joomla Event Registration Pro Calendar 4.1.3. The connected docs confirm an SQL injection vulnerability in index.php where the id parameter (via option=com_registrationpro&view=category&id) can be exploited unauthenticated to execute arbitrary SQL and extract sensitive data...
CVE-2017-20273 Joomla Event Registration Pro Calendar 4.1.3 SQL Injection
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with...
GHSA-CGXM-VR2F-6FJ8 parse-server: Denial of service via exponential-time processing of deeply nested query operators
Impact Parse Server is vulnerable to denial of service. A remote attacker can send a single, small query 1 KB containing deeply nested query condition operators. Parse Server processes the nested structure with exponential time complexity, which blocks the Node.js event loop and makes the server...
CVE-2026-48934
creationtimestamp| type| source ---|---|--- 2026-06-19 13:45:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2fdzi32c 2026-06-21 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/node-js-multiple-vulnerabilities20260622 2026-06-26 03:06:10+00:00| seen|...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: btmtk: Check the length of the SKB data in the WMT event before accessing the struct. The function btmtkusbhciwmtsync casts the SKB data from the WMT event response into struct btmtkhciwmtevt 7 bytes and struct...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Drivers: Staging: rtl8192bs: Fixed a deadlock in rtwjoinbsseventprehandle. There is a deadlock in rtwjoinbsseventprehandle, as shown below: Thread 1 | Thread 2 | settimer rtwjoinbsseventprehandle | modtimer spinlockbh //1 | Wait...
Astra Linux – Vulnerability in Linux
A issue was discovered in the Linux kernel through version 5.9.1, as used with Xen up to version 4.14.x. The file drivers/xen/events/eventsbase.c allows for the removal of event channels during the event-handling loop a race condition. This can lead to a use-after-free or NULL pointer...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: s390/qeth: fixed a use-after-free in hsci KASAN identified that the address was dereferenced after br2deveventwork was freed. ================================================================== BUG: KASAN: use-after-free in...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revisit gc autotuning As of commit 4608fdfc07e1, “netfilter: conntrack: collect all entries in one cycle” was changed, and the garbage collection of conntrack entries now occurs every 2 minutes. On systems...
CVE-2026-54762
creationtimestamp| type| source ---|---|--- 2026-06-19 08:27:41+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-4mr2-fg2p-w63c 2026-06-19 13:45:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3moni2ltzwt22...