3134 matches found
CVE-2026-23078
In the Linux kernel, the following vulnerability has been resolved: ALSA: scarlett2: Fix buffer overflow in config retrieval The scarlett2usbgetconfig function has a logic error in the endianness conversion code that can cause buffer overflows when count 1. The code checks if size == 2 where size...
The vulnerability of the PKCS12_item_decrypt_d2i_ex() function in the OpenSSL library allows a hacker to induce a service failure.
The vulnerability of the PKCS12itemdecryptd2iex function in the OpenSSL library is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
WeKan 授权问题漏洞
WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.20 contained a vulnerability related to authorization issues. This vulnerability arose from improper authorization handling when operating on the parameters item.cardId, item.checklistId, and card.board...
PT-2026-6073
Name of the Vulnerable Software and Affected Versions Wekan versions up to 8.20 Description A security issue exists in Wekan’s REST API component, specifically within the file models/checklistItems.js. Manipulation of the arguments item.cardId, item.checklistId, and card.boardId can lead to...
MINI-5FCH-6CCW-VVGQ
Bulletin has no description...
MINI-X5JP-64JQ-R5X5
Bulletin has no description...
CVE-2026-1746
A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of the component Online Report API. Such manipulation of the argument keyword leads to sql injection. The attack can be executed remotely. The exploit is...
CVE-2026-1746 JeecgBoot Online Report API loadDictItemByKeyword sql injection
A vulnerability was identified in JeecgBoot 3.9.0. This vulnerability affects unknown code of the file /JeecgBoot/sys/api/loadDictItemByKeyword of the component Online Report API. Such manipulation of the argument keyword leads to sql injection. The attack can be executed remotely. The exploit is...
MINI-M62V-C9FR-X396
Bulletin has no description...
MINI-6JGG-5G5R-WWQ8
Bulletin has no description...
MINI-J6C4-VFWR-W2F3
Bulletin has no description...
CVE-2026-1546
A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...
ECHO-35AF-8DFC-9FEE
Bulletin has no description...
CGA-WR8W-4QFP-854V
Bulletin has no description...
CGA-FP7C-47CQ-WJQ7
Bulletin has no description...
CGA-RJJQ-MFRH-M8MH
Bulletin has no description...
CGA-MR85-C529-W698
Bulletin has no description...
CGA-HF65-4GHG-H88J
Bulletin has no description...