153778 matches found
CVE-2026-80810
In the Linux kernel, the following vulnerability has been resolved: iouring/rsrc: fix folio size overflow in iovecfillbvec iovecfillbvec computes the folio size with a plain int 1: unsigned long foliosize = 1 folioshift; imu-folioshift is unsigned int and comes from folioshift of the folio backin...
CVE-2026-80770
In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: stop device IO before hidhwstop on probe failure nintendohidprobe calls hiddeviceiostart before joyconinit and joyconledscreate. If either fails, the error path jumps to errclose which calls hidhwclose/hidhwstop...
CVE-2026-85517
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...
EUVD-2026-71099
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...
CVE-2026-85517
A sensitive information disclosure vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the file /vehicle_management.sql handled by the SQL Database Backup File Handler . An unknown function in this component allows an unauthenticated remote attacker to disclose s...
CVE-2026-85517 code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...
CVE-2026-85513
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...
CVE-2026-85514
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument apikeyapi.user leads to improper privilege management. The attack may be...
EUVD-2026-71097
A vulnerability was detected in code-projects Vehicle Management System 1.0. The affected element is an unknown function of the file /busprofile.php. Performing a manipulation of the argument busid results in sql injection. It is possible to initiate the attack remotely. The exploit is now public...
CVE-2026-85516
A SQL injection vulnerability exists in code-projects Vehicle Management System 1.0 , specifically in the busid parameter of the file /busprofile.php. The vulnerability can be exploited remotely without authentication via manipulation of that argument. CVSS 3.1 rates it 7.3 (HIGH) with low impact...
CVE-2026-85514 StackStorm st2 API Key auth.py privileges management
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument apikeyapi.user leads to improper privilege management. The attack may be...
EUVD-2026-71088
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument apikeyapi.user leads to improper privilege management. The attack may be...
CVE-2026-85514 StackStorm st2 API Key auth.py privileges management
A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument apikeyapi.user leads to improper privilege management. The attack may be...
CVE-2026-85514
StackStorm st2 (up to 3.9.0) contains an improper privilege management vulnerability in the API Key Handler component (st2api/st2api/controllers/v1/auth.py). An attacker can manipulate the api_key_api.user argument remotely to gain elevated privileges, resulting in low impacts to confidentiality,...
CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...
EUVD-2026-71087
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...
CVE-2026-85513
StackStorm st2 up to 3.9.0 is vulnerable to improper privilege management in the NoOp RBAC backend . The flaw resides in the function assert_user_is_admin_if_user_query_param_is_provided within st2api/controllers/v1/actionexecutions.py, where manipulation of the User query parameter allows a remo...
CVE-2026-85513 StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management
A weakness has been identified in StackStorm st2 up to 3.9.0. This issue affects the function assertuserisadminifuserqueryparamisprovided of the file st2api/st2api/controllers/v1/actionexecutions.py of the component NoOp RBAC backend. This manipulation of the argument User causes improper privile...
CVE-2026-19043
CVE-2026-19043 is a Missing Authorization (ACL bypass) vulnerability in Menulux Portal by Menulux Software Inc. , affecting the critical POS management functions where access is not properly constrained by access control lists. This allows an authenticated low-privilege user to access functionali...
CVE-2026-19043 Authorization Bypass Critical POS Management Functions in Menulux Software's Menulux Portal
Missing Authorization vulnerability in Menulux Software Inc. Menulux Portal allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Menulux Portal: before 20260903211448...