6608 matches found
CVE-2026-65940
WhatsUp Gold is affected in versions released before 2026.0.2. The issue stems from excessive file system permissions, enabling a privileged attacker to write arbitrary files to a web-accessible location on the host server. Remediation inferred: upgrade to 26.0.2 or later.
CVE-2026-18474
The CVE-2026-18474 entry concerns the WP Directory Kit WordPress plugin prior to 1.5.6, where a parameter is not sanitised/escaped before being used in a SQL statement. This leads to unauthenticated SQL injection when a non-default search field type is configured, as described in the NVD/NIST rec...
CVE-2026-68265
In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULTMEMADVISEPREFLOC When prefetch region is DRMXECONSULTMEMADVISEPREFLOC for a BO VMA, the code used it as an index into regiontomemtype, causing an out-of-bounds access since the value is -1...
CVE-2026-68084
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
CVE-2026-68265
CVE-2026-68265 affects the Linux kernel, specifically the drm/xe/vm path. The issue arises when prefetching a BO VMA in the region DRM_XE_CONSULT_MEM_ADVISE_PREF_LOC, where the code uses the value as an index into region_to_mem_type[], causing an out-of-bounds access (value is -1). The remediatio...
CVE-2026-68084 staging: vme_user: fix location monitor leak in tsi148 bridge
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
EUVD-2026-55265
In the Linux kernel, the following vulnerability has been resolved: staging: vmeuser: fix location monitor leak in tsi148 bridge tsi148probe allocates a location monitor resource and links it into tsi148bridge-lmresources. The probe error path frees this list, but tsi148remove only frees the dma,...
CVE-2026-68084
The CVE concerns the Linux kernel staging: vme_user component, specifically the tsi148 bridge. The root cause is a leaked location monitor resource (lm_resources) because tsi148_remove() did not free lm_resources when unbinding or unloading, unlike other resources. The fix is to free the lm_resou...
Astra Linux – Vulnerability in Firefox and Thunderbird
Use-after-free in the DOM: Window and Location components. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
MINI-XXXX-6F7R-X43R
Bulletin has no description...
MINI-PRC9-H3F8-PMHF
Bulletin has no description...
Arbitrary Output Location Change in GNU Bison
...
MINI-WFR6-JGFC-G9QX
Bulletin has no description...
CVE-2026-64640 Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation
Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials...
MINI-9G73-HP2J-G6F6
Bulletin has no description...
MINI-MW36-WG87-QP73
Bulletin has no description...
MINI-35JH-34WR-PV65
Bulletin has no description...
MINI-2X4Q-23HJ-P3F2
Bulletin has no description...
MAL-2026-12043 Malicious code in sextant-cli-linux-arm64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc34f69b5a68c549feccfb32cc2dbfbf2d4c787a4876241027b4299305fd2c53 The package is a platform-specific leaf linux/arm64 whose only shipped artifact is a 12 MB stripped Go binary at bin/sxt. The package.json omits...