CVE-2026-23622

Easy!Appointments is a self hosted appointment scheduler. In 1.5.2 and earlier, application/core/EASecurity.php::csrfverify only enforces CSRF for POST requests and returns early for non-POST methods. Several application endpoints perform state-changing operations while accepting parameters from...

CVE-2025-15527 WP Recipe Maker <= 10.2.2 - Insecure Direct Object Reference to Sensitive Information Exposure

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the apigetpostsummary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-level...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001044)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001044 advisory. Race condition in the gettaskioprio function in block/ioprio.c in the Linux kernel before 4.6.6 allows local users to gain privileges or cause a denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000545)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000545 advisory. The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmdmkdirty in the touchpmd function inside the THP implementation. touchpmd can be reached by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001369)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001369 advisory. In tungetuser of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privilege...

CVE-2026-23722: Improper Neutralization of Input During Web Page Generation

WeGIA is a Web Manager for Charitable Institutions. Prior to 3.6.2, a Reflected Cross-Site Scripting XSS vulnerability was discovered in the WeGIA system, specifically within the html/memorando/inseredespacho.php file. The application fails to properly sanitize or encode user-supplied input via t...

PT-2026-63615

Уязвимость системы планирования и оперативного управления полётами OpenSky связана с непринятием мер по защите структуры запроса SQL при обработке параметра get doc. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные SQL-запросы...

PT-2026-3217

The WP Recipe Maker plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 10.2.2 via the api get post summary function due to insufficient restrictions on which posts can be retrieved. This makes it possible for authenticated attackers, with Contributor-leve...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004110)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004110 advisory. A memory leak in the nl80211getftmresponderstats function in net/wireless/nl80211.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003813 advisory. A memory leak in the bfadimgetstats function in drivers/scsi/bfa/bfadattr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000622 advisory. The sgioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uninitialized kernel heap-memory...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004133 advisory. getgatepage in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting caused by gate page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000772)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000772 advisory. Stack-based buffer overflow in the getmatchingmodelmicrocode function in arch/x86/kernel/cpu/microcode/intelearly.c in the Linux kernel before 4.0 allows...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003792)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003792 advisory. A memory leak in the ipmibmcregister function in drivers/char/ipmi/ipmimsghandler.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004068)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004068 advisory. A memory leak in the fastrpcdmabufattach function in drivers/misc/fastrpc.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004205)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004205 advisory. getgatepage in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting caused by gate page...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000693 advisory. The getuserasmex macro in arch/x86/include/asm/uaccess.h in the Linux kernel before 4.7.5 does not initialize a certain integer variable, which allows local users to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001060)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001060 advisory. Race condition in the ttyioctl function in drivers/tty/ttyio.c in the Linux kernel through 4.4.1 allows local users to obtain sensitive information from kernel memor...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003669 advisory. In getfutexkey of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of privilege with no additional privileges needed...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004438)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004438 advisory. In tungetuser of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privilege...