154926 matches found
CVE-2026-64131
A flaw was found in the Linux kernel's memory management subsystem. The unmapping process for device-private and exclusive memory pages incorrectly checks if a virtual memory area VMA is anonymous. This can lead to spurious warnings during process teardown when a folio is part of a private...
CVE-2026-64130
A flaw was found in the Linux kernel's memory management subsystem. When the initonfree feature is enabled, the system may fail to properly initialize memory tags for 'huge zero folios' large blocks of memory filled with zeros before they are mapped to user space. This oversight can lead to the...
CVE-2026-64153
A flaw was found in the drm/msm Direct Rendering Manager / Qualcomm MSM driver within the Linux kernel. This vulnerability arises from an incorrect handling of return values in the iommumapsgtable function. Previously, the function would trigger a warning instead of properly returning an error wh...
CVE-2026-64171
A flaw was found in the Linux kernel's i2c Tegra module. This vulnerability occurs when a mutex lock fails, leading to a power management PM runtime reference leak. This leak prevents the affected device from entering runtime suspend, which can lead to increased power consumption or other resourc...
CVE-2026-64182
A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks memblknrpoisoninc and memblknrpoisonsub fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous...
CVE-2026-64165
A flaw was found in the Linux kernel, specifically within the ARM Integrator/CP architecture. During early system initialization, a memory allocation function is called before the memory management system is fully ready. This can lead to a kernel crash, resulting in a Denial of Service DoS for th...
CVE-2026-64129
A flaw was found in the Linux kernel's memory management component. This vulnerability, located in the migratevmainserthugepmdpage function, can lead to a spinlock being permanently held if a specific address space check fails. This unreleased spinlock can cause a system deadlock, resulting in a...
CVE-2026-64152
A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem when iommudebug is enabled. This issue occurs because an error handling path attempts to unmap memory without a proper initial mapping, leading to an inconsistent state within the IOMMU's debugging and...
CVE-2026-15811
A vulnerability was found in kronosnet's version =1.34 cryptographic configuration management. The framework does not correctly zero-out or wipe sensitive memory segments after executing changes to its cryptographic configuration. This omission leaves raw encryption keys resident in memory after...
CVE-2026-16334
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...
EUVD-2026-46146
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...
CVE-2026-16334
The CVE-2026-16334 entry concerns itsourcecode Hospital Management System 1.0. A SQL injection vulnerability is present in an unknown code path of /prescriptionorder.php, triggered by manipulating the editid parameter. The issue is exploitable remotely, and publicly available exploit material exi...
CVE-2026-16334
A vulnerability was identified in itsourcecode Hospital Management System 1.0. This vulnerability affects unknown code of the file /prescriptionorder.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and...
PT-2026-63164
Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Cost Management versions 12.2.3 through 12.2.15 Description An issue exists in the Cost Planning component of the Oracle Cost Management product. A high privileged attacker with network access via HTTP can...
PT-2026-63073
Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description A flaw in the Install component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to...
PT-2026-63003
Vulnerability in the Oracle Order Management product of Oracle E-Business Suite component: Product Diagnostic Tools. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Order...
PT-2026-63070
Name of the Vulnerable Software and Affected Versions Oracle Agile Engineering Data Management version 6.2.1 Description An issue in the Install component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized rea...
PT-2026-63054
Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This iss...
PT-2026-62157
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Enterprise Config Management component allows a low privileged attacker with network access via HTTPS to...
PT-2026-62683
Name of the Vulnerable Software and Affected Versions Oracle WebCenter Content version 12.2.1.4.0 Oracle WebCenter Content version 14.1.2.0.0 Description An issue exists in the Web Content Management component of Oracle Fusion Middleware. A high privileged attacker with network access via HTTP ca...