CVE-2026-21098

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

CVE-2026-21098

CVE-2026-21098 is an improper access control vulnerability in Samsung's Link to Windows feature, affecting versions prior to SMR Sep-2026 Release 1 . A local attacker can establish a connection with the PC without proper user interaction , resulting in high impact on availability as scored by the...

CVE-2026-21098

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

CVE-2026-21098

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

EUVD-2026-74639

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

PT-2026-88832

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

CVE-2026-21098: Improper Access Control

Improper access control in Link to Windows prior to SMR Sep-2026 Release 1 allows local attackers to establish a connection with the PC without proper user interaction...

CVE-2026-64348 usb: free iso schedules on failed submit

In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...

EUVD-2026-9016

The WP Accessibility plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'alt' attribute of images processed by the "Long Description UI" feature in all versions up to, and including, 2.3.1. This is due to the plugin's JavaScript retrieving the alt attribute using...

CVE-2025-65229

creationtimestamp| type| source ---|---|--- 2025-12-08 23:19:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7j662xtup2s...

EUVD-2008-4132

Malware in sbrugna...

EUVD-2024-36739

Malicious code in bioql PyPI...

Malicious code in pro-dj-link-to-midi (npm)

The package pro-dj-link-to-midi was found to contain malicious code...

MAL-2025-29674 Malicious code in pro-dj-link-to-midi (npm)

The package pro-dj-link-to-midi was found to contain malicious code...

CVE-2025-33014: Use of Web Link to Untrusted Target with window.opener Access

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7 and 6.2.0.0 through 6.2.0.4 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the...

CVE-2024-37538

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Thomas Kuhlmann Link To Bible allows Stored XSS.This issue affects Link To Bible: from n/a through 2.5.9...

hdf5: multiple CVEs

HDF5 Library through 1.14.3 contains a heap-based buffer over-read caused by the unsafe use of strdup in H5MMxstrdup in H5MM.c called from H5Genttolink in H5Glink.c...

openSUSE Security Advisory (SUSE-SU-2024:0817-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-25116 WordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sudipto Link to URL / Post link-to-url-post allows Blind SQL Injection.This issue affects Link to URL / Post: from n/a through = 1.3...

CVE-2025-25116 WordPress Link to URL / Post plugin <=1.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in sudipto Link to URL / Post link-to-url-post allows Blind SQL Injection.This issue affects Link to URL / Post: from n/a through = 1.3...