21327 matches found
net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write
...
CVE-2025-68767
In the Linux kernel, the following vulnerability has been resolved: hfsplus: Verify inode mode when loading from disk syzbot is reporting that SIFMT bits of inode-imode can become bogus when the SIFMT bits of the 16bits "mode" field loaded from disk are corrupted. According to 1, the permissions...
PT-2026-3049
Kingdia CD Extractor 3.0.2 contains a buffer overflow vulnerability in the registration name field that allows attackers to execute arbitrary code. Attackers can craft a malicious payload exceeding 256 bytes to overwrite Structured Exception Handler and gain remote code execution through a bind...
PT-2026-3184
Name of the Vulnerable Software and Affected Versions NBMonitor version 1.6.8 Description NBMonitor version 1.6.8 is subject to a denial of service condition. An attacker can cause the application to crash by providing a specially crafted input to the registration code field. Specifically, pastin...
PT-2026-3157
Name of the Vulnerable Software and Affected Versions Ether MP3 CD Burner version 1.3.8 Description The software contains a buffer overflow issue in the registration name field. This allows for remote code execution. An attacker can create a malicious payload to overwrite SEH handlers and execute...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002765)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002765 advisory. The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001780 advisory. Multiple stack-based buffer overflows in the Near Field Communication Controller Interface NCI in the Linux kernel before 3.4.5 allow remote attackers to cause a...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002094)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002094 advisory. Multiple stack-based buffer overflows in the Near Field Communication Controller Interface NCI in the Linux kernel before 3.4.5 allow remote attackers to cause a...
PT-2026-3040
Name of the Vulnerable Software and Affected Versions AbsoluteTelnet version 11.24 Description The software contains a flaw that allows local attackers to cause a denial of service by manipulating the DialUp connection and license name fields. An attacker can craft a 1000-character payload and...
Cinspiration RDP Manager security vulnerabilities
Cinspiration RDP Manager is a remote desktop management tool developed by the German company Cinspiration. Version 4.9.9.3 of Cinspiration RDP Manager contains a security vulnerability, which stems from the connection input field. This vulnerability could allow local attackers to cause the...
PT-2026-3185
Name of the Vulnerable Software and Affected Versions Nsauditor version 3.2.3 Description Nsauditor 3.2.3 contains a denial of service issue in the registration code input field. An attacker can crash the application by pasting a large buffer of 256 repeated characters into the Key field. This...
Celestial AbsoluteTelnet Buffer Error Vulnerability
Celestial AbsoluteTelnet is a Telnet/SSH terminal client software developed by the American company Celestial. Version 11.24 of Celestial AbsoluteTelnet contains a buffer error vulnerability. This vulnerability stems from manipulating the username and error report fields, which could allow local...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003047)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003047 advisory. The hidinputfield function in drivers/hid/hid-core.c in the Linux kernel before 4.6 allows physically proximate attackers to obtain sensitive information from kernel...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002699)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002699 advisory. In the Linux kernel before 4.15, fs/ocfs2/aops.c omits use of a semaphore and consequently has a race condition for access to the extent tree during read operations ...
Cross-site Scripting (XSS)
Overview ph7software/ph7builder is a pH7Builder. Social Dating Web App Site Builder Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Description field in user profiles. An attacker can execute arbitrary JavaScript code in the context of other users by submittin...
CVE-2025-59020
By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave them the ability to insert arbitrary data into prohibited exclude fields of a database table for which the user already has write permission for a reduced s...
CVE-2025-63644
A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the user profile Description field...
CVE-2025-63644
A stored cross-site scripting (XSS) vulnerability exists in pH7Software pH7-Social-Dating-CMS version 17.9.1 . The flaw is located in the user profile Description field , where the application fails to properly neutralize input during web page generation. This allows an attacker to inject malicio...
PT-2026-2927
Name of the Vulnerable Software and Affected Versions pH7Software pH7-Social-Dating-CMS version 17.9.1 Description A stored cross-site scripting XSS issue exists in the user profile Description field. This allows for the injection of malicious scripts that can be executed when other users view th...
