67953 matches found
SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:4346-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4346-1 advisory. This update for perl-DBI fixes the following issue: - CVE-2026-78030: arbitrary modules loaded due to unvalidated dbmtype and dbmmldbm...
PT-2026-98549
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue exists in the netfilter cttimeout module during module unloading. The cttimeout exit function unregisters per-net operations before clearing the timeout hook...
PT-2026-98565
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the generic netlink controller where the policy dump maintains pointers to the target family's operation and policy tables within its callback state. Because a dump ca...
PT-2026-98717
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASOC Intel AVS component where the strace open function invokes try module get, which increments the module reference count upon success. If subsequent operations...
CVE-2026-100187: Improper Input Validation
The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based solely on a length check exactly 69 characters and a suffix check ending in ".onion", without performing proper hostname parsing or onion-domain...
PT-2026-99135
Name of the Vulnerable Software and Affected Versions Horilla versions 1.5.0-85 and earlier Description An authentication bypass exists in the payroll module where the system fails to consistently authorize access before loading records. An authenticated employee can manipulate identifiers to...
PT-2026-98879
Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane exposes the delete and delete invoice tax functions within the Invoices module as state-changing routes that do not require a POST request or CSRF Cross-Site Request Forgery token...
Linux Distros Unpatched Vulnerability : CVE-2026-98054
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation...
PT-2026-98849
Name of the Vulnerable Software and Affected Versions AIL Framework affected versions not specified Description The Onion module contains a flaw in its URL extraction logic due to a performance shortcut. The system validates .onion targets using only a length check of exactly 69 characters and a...
CVE-2026-98054: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...
CVE-2026-98054
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix unbalanced module reference count straceopen invokes trymoduleget which on success takes the module reference. If any follow up operation causes straceopen to fail, the refcount shall be put down...
CVE-2026-97901
In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables in its callback state. A dump may be split across multiple skbs and...
Linux Distros Unpatched Vulnerability : CVE-2026-97901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables i...
SUSE CVE-2026-93809
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: flush pending RCU callbacks on module unload Call rcubarrier in module exit to wait for outstanding callrcu callbacks before freeing module text, preventing late callback execution in freed memory. BUG: unable to hand...
CVE-2021-41773
CVE-2021-41773 Apache HTTP服务器漏洞（仅影响2.4.49版本） 需求设置 httpd.conf ... LoadModule cgimodule modules/modcgi.so 取消注释这一行 ... AllowOverride none Require all denied 注释掉这一行或设置为Require all granted ... 参考 https://attackerkb.com/topics/1RltOPCYqE/cve-2021-41773/rapid7-analysis...
GHSA-87MG-5GRR-RHWH Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to $this-feedIo-read$url without any scheme validation or private-IP blocklist. A backend user with module-edit permissions can configure an arbitrary URL pointing to internal network services,...
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to $this-feedIo-read$url without any scheme validation or private-IP blocklist. A backend user with module-edit permissions can configure an arbitrary URL pointing to internal network services,...
CVE-2026-97320
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side...
CVE-2026-61604
The ixo Blockchain is a Layer 1 blockchain that runs on both Testnet and Mainnet. Prior to version 8.0.0, the x/bonds module moved funds from an address that was resolved from a DID verification method, without verifying that the resolved address belonged to the transaction signer. Affected...
CVE-2026-97320 YunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery
A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. The affected element is the function AiKnowledgeDocumentServiceImpl.readUrl of the file AiKnowledgeDocumentServiceImpl.java of the component AI Knowledge Module. This manipulation of the argument url causes server-side...