CVE-2026-24882 vulnerabilities

Vulnerabilities for packages: gnupg...

MINI-Q35P-64XQ-GV4H

Bulletin has no description...

MINI-V49X-24JF-MPVF

Bulletin has no description...

MINI-94WG-G43X-Q7RJ

Bulletin has no description...

MINI-G5MW-R9GF-V98M

Bulletin has no description...

MINI-FJM6-3WQ8-XFWQ

Bulletin has no description...

EUVD-2026-58813

OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...

PT-2026-73044

Name of the Vulnerable Software and Affected Versions SourceCodester Online Book Store System version 1.0 Description Cross site scripting occurs in the System Settings Module within the file '/admin/index.php?page=site settings'. This issue allows a remote attacker to execute malicious scripts...

PT-2026-73038

Name of the Vulnerable Software and Affected Versions VictoriaMetrics versions prior to 1.147.0 Description An issue exists in the VMAuth Authentication Endpoint within the requestHandler function of the app/vmauth/main.go file. A remote attacker can perform a manipulation that leads to improper...

PT-2026-72955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA timer component where the snd timer close locked function marks an instance with the SNDRV TIMER IFLG DEAD flag but fails to clear it upon completion. This ca...

PT-2026-72889

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection flaw exists in the /viewmedicine.php file. The issue occurs when the delid argument is manipulated, allowing an attacker to execute arbitrary SQL commands o...

PT-2026-73040

Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description An issue exists where the file /etc/shadow contains hard-coded credentials. This allows a remote attacker to potentially gain unauthorized access, although the attack requires a high degree of...

PT-2026-73039

Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within an unknown function in the /edit teacher.php file. SQL injection is a technique wher...

PT-2026-73041

Name of the Vulnerable Software and Affected Versions LB-LINK X-PRO version 1.0.22-20231206 Description A security flaw exists in the /etc/config/easycwmp file that allows for the use of hard-coded credentials. This issue can be exploited remotely, although the attack is considered highly complex...

PT-2026-73043

Name of the Vulnerable Software and Affected Versions SourceCodester Online Clothing Store version 1.0 Description An issue exists within the SQL Database Backup component, specifically affecting the /db/shopping.sql file. This flaw allows remote attackers to access files or directories through...

PT-2026-73066

Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A remote SQL injection is possible due to improper handling of the proId argument within an unknown function in the '/action.php' endpoint. SQL injection is a technique where an...

Linux Distros Unpatched Vulnerability : CVE-2026-74511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: mgmt: fix pending command UAF in EIR updates MGMTOPSETLOCALNAME is handled asynchronously on powered controllers and can run setnamesync. When the...

PT-2026-72305

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CAN BCM module where stale receive RX and transmit TX operations persist after device removal. For RX operations, an RX SETUP update for an existing operation coul...

PT-2026-72214

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390/monwriter component where the system fails to verify if the data length remains consistent when data buffers are reused, such as for interval sample records. ...

Linux Distros Unpatched Vulnerability : CVE-2026-74501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: usb-audio: fix use-after-free in umptoendpoint createmidi2ump registers a card-owned sndumpendpoint and stores a back-pointer to its per-interface...