Dotnetnuke < 10.3.3 Unauthorized comments on private journal posts (GHSA-86mr-4mmw-j9g2)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Journal module could allow an authenticated user to add comments to private journal posts...

PT-2026-81898

Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2026-77129: Improper Neutralization of Special Elements Used in a Template Engine

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

Oracle Linux 9 : python-urwid (ELSA-2026-58952)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-58952 advisory. - Fix CVE-2026-9323: use cryptographically secure session identifiers in web display module Tenable has extracted the preceding description block directly from...

ROS-20260825-73-0016

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel Wireless Pmsr Function Use-After-Free

The vulnerability of the cfg80211pmsrwdevdown function in the net/wireless/pmsr.c module, which supports wireless communication in Linux kernel, is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the...

Linux RxRPC Session Sockets DoS

The vulnerability of the rxrpcpostresponse function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support in Linux kernel, is related to incorrect comparisons when using erroneous factors. Exploiting this vulnerability can allow an attacker to cause service failures...

net/rxrpc/rxgk.c Kernel Session Compromise

The vulnerability of the rxgkdoverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside of the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Linux net/sched/cls_flow Flow Failure

The vulnerability of the flowchange function in the net/sched/clsflow.c module of the net/sched subsystem of the Linux operating system’s kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel xfrm_nat_keepalive_net_init Buffer Overflow

The vulnerability of the xfrmnatkeepalivenetinit function in the net/xfrm/xfrmnatkeepalive.c module, which implements networking functions in the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Solarflare Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the efxmcdirxpullrsscontextconfig function in the drivers/net/ethernet/sfc/mcdiilters.c module of the Solarflare Ethernet network adapter driver for Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...

Linux snd_pcm_attach_substream Buffer Overflow DoS

The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel ext2_fill_super Buffer Overflow

The vulnerability of the ext2fillsuper function in the fs/ext2/super.c module of the Linux kernel file system is related to an invalid negative shift operation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux Heap Buffer Overflow DoS

The vulnerability of the sofcarddailinkscreate function in the sound/soc/intel/boards/sofsdw.c kernel module of the Linux operating system is related to a single-issue error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the simplifysymbols function in the kernel/module/main.c module of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux RxRPC Kernel Heap Buffer Overflow DoS

The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

JSONata lookup() function Code Execution

The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux IPv6 Datagram Buffer Overflow DoS

The vulnerability of the ip6datagramsendctl function in the net/ipv6/datagram.c module of the IPv6 protocol implementation in the Linux operating system is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Block Crypto Evict Key

The vulnerability of the blkcryptoevictkey function in the block/blk-crypto.c module, which is part of the Linux kernel’s block-level support, is related to an incorrect check on the returned value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

Linux drivers/scsi/hisi_sas/hisi_sas_main.c hisi_

The vulnerabilities of the functions hisisasslottaskfree, hisisasreleasetask in the module drivers/scsi/hisisas/hisisasmain.c, and deregdevicev3HW in the module drivers/scsi/hisisas/hisisasv3HW.c of the Linux kernel are related to synchronization errors when using shared resources. Exploiting the...