529 matches found
CVE-2026-89717
A flaw was found in the zram component of the Linux kernel. When zramdestroycomps is called, it incorrectly resets the primary compressor to a NULL state. This invalid state can lead to a NULL pointer dereference when compalgorithmshow attempts to access the compressor, potentially causing system...
CVE-2026-89717 zram: set default primary compressor in zram_destroy_comps()
In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zramdestroycomps Patch series "zram: fix zram issues reported by sashiko". Sashiko drove by and reported 1 a couple of zram issues: a possible BUGON in zlib code due to missing winbits rang...
CVE-2026-63303
A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash ../ sequences before resolving and serving the requested file. An authenticated attacker with admin privileges can use this vulnerability to read...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.67 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
ALSA-2026:18597 Low: NetworkManager security update
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband WWAN, and PPPoE devices, as well as providing VPN integration with a varie...
CVE-2023-49898
In streampark, there is a project module that integrates Maven's compilation capability. However, there is no check on the compilation parameters of Maven. allowing attackers to insert commands for remote command execution, The prerequisite for a successful attack is that the user needs to log in...
PT-2026-2166
Name of the Vulnerable Software and Affected Versions wpDiscuz versions prior to 7.6.47 Description The software contains a stored cross-site scripting issue that permits authenticated attackers to inject malicious JavaScript. This is achieved by importing a specially crafted options file...
WordPress Curator.io plugin <= 1.9.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Jarno Vos jrn5151 in WordPress Plugin Curator.io versions = 1.9.5...
WordPress WP JobHunt plugin <= 7.7 - Authenticated (Candidate+) Insecure Direct Object Reference vulnerability
Authenticated Candidate+ Insecure Direct Object Reference vulnerability discovered by meghnine islem - CYBEARS in WordPress Plugin WP JobHunt versions = 7.7...
WordPress CSS3 Buttons plugin <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode Attributes vulnerability discovered by Gilang - DJ in WordPress Plugin CSS3 Buttons versions = 0.1...
WordPress Digiseller plugin <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Digiseller versions = 1.3.0...
EUVD-2018-12885
Malware in sbrugna...
EUVD-2018-11909
Malware in sbrugna...
EUVD-2018-12886
Malware in sbrugna...
EUVD-2021-2587
Malware in sbrugna...
EUVD-2018-11910
Malware in sbrugna...
EUVD-2024-16230
Malicious code in bioql PyPI...
EUVD-2023-33760
Malicious code in bioql PyPI...