83401 matches found
CVE-2026-59240 IDOR in Prospero Flow CRM allows deletion of other users' notifications
The vulnerability involves an Insecure Direct Object Reference IDOR in the DeleteNotificationController::delete method at endpoint GET /notification/delete/id. The flaw allows any authenticated user, regardless of company or permissions, to delete notifications belonging to any other user in the...
CVE-2026-59240
The vulnerability involves an Insecure Direct Object Reference IDOR in the DeleteNotificationController::delete method at endpoint GET /notification/delete/id. The flaw allows any authenticated user, regardless of company or permissions, to delete notifications belonging to any other user in the...
DEBIAN-CVE-2026-64552
In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receivebig receivebig bounds the device-announced length by bigpacketsnumskbfrags + 1 PAGESIZE. That is still too loose: addrecvbufbig sets sg1 to start at offset sizeofstruct paddedvnethdr into the...
DEBIAN-CVE-2026-64554
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb skbchecksumhelp reallocates the head via...
DEBIAN-CVE-2026-64541
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smccdcrxhandler by pinning the socket smccdcrxhandler looks up the connection by token under the link group's connslock, drops the lock, and then dereferences conn and the smcsock derived from it, ending in...
DEBIAN-CVE-2026-64539
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix stack OOB write when prepending the Flags AD eircreateadvdata builds the advertising data into a fixed-size buffer "size", 31 for the legacy path. It may prepend a 3-byte "Flags" AD structure LEADNOBREDR on an...
DEBIAN-CVE-2026-64543
In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in tipcdiscrcv bearerdisable frees b-disc with tipcdiscdelete's plain kfree, but tipcdiscrcv still dereferences b-disc in RX softirq under rcureadlock tipcudprecv - tipcrcv - tipcdiscrcv...
MINI-CJ88-M68P-7V7F
Bulletin has no description...
MINI-QJP6-HVF4-Q26R
Bulletin has no description...
MINI-4C9J-M9VV-3CX7
Bulletin has no description...
MINI-58M4-JQ4V-M8JJ
Bulletin has no description...
MINI-GQ2C-823G-JJGJ
Bulletin has no description...
MINI-GQWP-X3JM-QW99
Bulletin has no description...
MINI-QPFF-P275-2RVF
Bulletin has no description...
MINI-45HG-2286-Q395
Bulletin has no description...
MINI-JF5X-QJH4-R5QM
Bulletin has no description...
MINI-WHJG-W2XG-8PFJ
Bulletin has no description...
MINI-R73H-RX98-4M9G
Bulletin has no description...