75147 matches found
Dotnetnuke < 10.3.3 Server-Side request forgery in journal module (GHSA-hmwm-c2hx-wmxh)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - A server-side request forgery SSRF vulnerability in the Journal module could allow an authenticated user to cause the server to...
Linux snd_pcm_attach_substream Buffer Overflow DoS
The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-81203
Improper Neutralization of Input During Web Page Generation XSS vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the confirmation and magic link interaction forms. When a strategy is configured with require interaction? set to true, AshAuthentication serve...
CVE-2026-62862: Improper Restriction of Excessive Authentication Attempts
Typebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default passwordless email magic-link authentication is vulnerable to login-code brute forcing that leads to account takeover. The email provider overrides NextAuth's default cryptographically secur...
Linux kernel NFC Driver Heap Buffer Overflow DoS
The vulnerability of the pn533usbdisconnect function in the NFC driver/nfc/pn533/usb.c module of the Linux operating system’s kernel is related to errors during link counters updates. Exploiting this vulnerability could allow a remote attacker to cause service failures...
netfilter xt_ct_tgDestroy Heap Buffer Overflow DoS
The vulnerability of the xtcttgDestroy function in the net/netfilter/xtCT.c module of the netfilter component of the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the hugetlbpmdshared function in the include/linux/hugetlb.h module of the Linux kernel is related to errors during link-time updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Kernel RxRPC Buffer Overflow DoS
The vulnerability of the rxrpcinputpacketonconn function in the net/rxrpc/iothread.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2026-34959: Improper Input Validation
Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $SERVER"REQUESTURI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect header...
CVE-2026-66882: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation XSS vulnerability in team-alembic AshAuthentication allows reflected cross-site scripting via the confirmation and magic link interaction forms. When a strategy is configured with requireinteraction? set to true, AshAuthentication serves...
Direct Rendering Infrastructure Heap Buffer Overflow DoS
The vulnerability of the ccsmodestore function in the drivers/gpu/drm/xe/xegtccsmode.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service...
Linux SCSI Heap Buffer Overflow DoS
The vulnerability of the scsiallocsdev function in the drivers/scsi/scsiscan.c driver for SCSI devices in Linux operating systems is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access (Link Following) vulnerability. A low-privileged local attacker with user interaction could potentially exploit this to achieve Arbitrary Write . The CVSS v3.1 score is 6.6 (MEDIUM) with a vector of AV:L/AC:L/PR:L/UI:R/S:U/C...
EUVD-2026-65091
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-78541
A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...