383 matches found
CVE-2026-109305
Craft CMS versions 5.10.2 through 5.10.13 contain a Twig sandbox bypass vulnerability. This flaw allows non-admin users with the System Messages permission to invoke arbitrary PHP callables (such as passthru or system) via the "has some" and "has every" operators in sandboxed templates. Successfu...
EUVD-2026-97607
Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with the System Messages permission can supply two-argument callables such as passthru or system in sandboxed templates t...
PT-2026-98084
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA component where handler object types are not properly validated within the acpi ev has default handler and acpi ev find region handler functions...
PT-2026-98099
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the serial8250 register 8250 port function where uart-port.dev is conditionally copied from up-port.dev only if the latter is non-NULL. If both the existing uart slot...
PT-2026-94122
Name of the Vulnerable Software and Affected Versions djust versions prior to 1.0.7 Description An issue exists in the per-object authorization mechanism involving the get object and has object permission functions. While authorization was enforced on WebSocket mount and event paths, it was missi...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fixed the potential underflow in virtiotransportgetcredit. The credit calculation in virtiotransportgetcredit uses unsigned arithmetic: ret = vvs-peerbufalloc - vvs-txcnt - vvs-peerfwdcnt; If the peer reduces its...
Astra Linux – Vulnerability in libgit2
libgit2 is a portable C implementation of the Git core methods, provided as a linkable library with a robust API. It allows for integrating Git functionality into your application. However, using properly crafted inputs to gitindexadd can lead to heap corruption, which may be exploited for...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: The issue of reference count leak for PCI devices in hasexternalpci has been fixed. foreachpcidev is implemented through pcigetdevice. The comment accompanying pcigetdevice indicates that it will increase the referenc...
CVE-2026-13213
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...
CVE-2026-13213 Bluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_register
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...
CVE-2026-13213 Bluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_register
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...
CVE-2026-13213 Bluetooth HAS: NULL-pointer dereference DoS when a bonded peer reconnects before bt_has_register
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BTCONNCBDEFINE, so securitychanged runs for every connection that establishes security even before the application has called bthasregister. The service attribute...
PT-2026-80937
The Hearing Access Service HAS GATT server in subsys/bluetooth/audio/has.c installs a connection-callback set unconditionally via BT CONN CB DEFINE, so security changed runs for every connection that establishes security even before the application has called bt has register. The service attribut...
CVE-2026-15142 Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision
The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper capability handling in the allowattachmentactions function, which can treat a target user ID as a media attachment ID during user capability...
MINI-MR7F-R28P-V99P
Bulletin has no description...
MINI-4WVR-X8F5-RQCF
Bulletin has no description...
MINI-HHPP-WJ3F-5G6M
Bulletin has no description...
MINI-5862-9J86-XFPJ
Bulletin has no description...