9370 matches found
CVE-2026-85013: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...
CVE-2026-85013: Improper Neutralization of Special Elements used in an OS Command
A flaw was found in environment-modules. A local attacker can exploit this vulnerability by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name, containing shell...
CVE-2026-54628
Anyquery is a Go-based SQL query engine built on SQLite. In server mode (anyquery server), the unauthenticated MySQL-compatible port allows remote attackers to create virtual tables using modules such as json_reader and log_reader, which internally use go-getter to fetch arbitrary URLs. Because o...
EUVD-2026-77812
Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules such as jsonreader and logreader through its unauthenticated MySQL-compatible server port without restricting outbound destinations. A remote attacker can provi...
Astra Linux – Vulnerability in linux-astra-modules-5.10, linux-astra-modules-5.15, linux-astra-modules-6.1
The vulnerability of Linux Astra Modules relates to the provision of unlimited memory. Exploiting this vulnerability allows a hacker to trigger a service failure using a specially created elf file...
Astra Linux – Vulnerability in Linux 5.10, Linux
Dm-verity is used to extend the root-of-trust to root file systems. LoadPin builds upon this feature to restrict module/firmware loads to only the trusted root file system. Currently, device-mapper table reloads allow users with root privileges to replace the target with an equivalent dm-linear...
Astra Linux – Vulnerability in linux-astra-modules-5.10, linux-astra-modules-5.15, linux-astra-modules-6.1
The vulnerability of Linux Astra Modules relates to errors during thread blocking. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the use of a specially created file system...
Astra Linux – Vulnerability in linux-astra-modules-5.4, linux-astra-modules-5.10
The vulnerability of the parsec inodegetsecid function in the linux-astra-modules kernel module is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause service failures...
Astra Linux – Vulnerabilities in linux-astra-modules-5.4, linux-astra-modules-5.15, linux-astra-modules-5.10
The vulnerability of the pdplget function in the linux-astra-modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...
perl:5.32 security update
An update is available for perl-Module-Build, perl-threads, perl-perlfaq, module.perl-File-Temp, perl-Module-Metadata, module.perl, perl-File-HomeDir, perl-Getopt-Long, perl-Sys-Syslog, perl-Math-BigRat, module.perl-Object-HashBase, perl-URI, module.perl-version, module.perl-Exporter,...
Astra Linux – Vulnerability in linux-astra-modules-6.1, linux-astra-modules-5.10, linux-astra-modules-5.15
The vulnerability of Linux Astra Modules’ kernel modules is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...
Astra Linux – Vulnerability in linux-astra-modules-5.4, linux-astra-modules-5.10
The vulnerability of the parsechooksetxattr function in the Linux kernel-module astra-modules is related to the lack of checking for the returned value. Exploiting this vulnerability allows a perpetrator to cause a service failure...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
An integer overflow or wrap-around vulnerability exists in the OpenEuler kernel on Linux file system modules, allowing for forced integer overflow. This issue affects the OpenEuler kernel, starting from version 4.19.90, up to and including version 4.19.90-2401.3, as well as versions 5.10.0-60.18....
Astra Linux – Vulnerability in linux-astra-modules-5.4, linux-astra-modules-5.10
The vulnerability of the parsec inodesetattr function in the Linux-astra-modules kernel module is related to the assignment of a null pointer. Exploiting this vulnerability allows an attacker to cause service failures...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: inet: inetdefrag: prevent sk release while still in use The functions iplocalout and others can pass skb-sk as a function argument. If the skb is a fragment and reassembly occurs before such a function call returns, the sk must n...
RFC modules in developing Information Disclosure
The vulnerability of RFC software modules for developing and executing applications in the ABAP SAP NetWeaver Application Server ABAP environment is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to disclose the protected information...
PT-2026-99767
Name of the Vulnerable Software and Affected Versions OctoberCMS versions prior to 4.1.20 OctoberCMS versions prior to 4.2.26 OctoberCMS versions prior to 4.3.5 Description A remote server-side request forgery exists due to the manipulation of the realSourcePath argument within the...
CVE-2026-90496
A SQL injection vulnerability exists in Fengoffice Feng Office versions up to 3.11.13.11 , affecting the update_system_module_order/update_dimension_order functions in the file application/controllers/MoreController.class.php (component: Reorder Handlers ). An authenticated attacker (high privile...
CVE-2026-90496 Fengoffice Feng Office Reorder Handlers MoreController.class.php update_dimension_order sql injection
A vulnerability was found in Fengoffice Feng Office up to 3.11.13.11. Affected is the function updatesystemmoduleorder/updatedimensionorder of the file application/controllers/MoreController.class.php of the component Reorder Handlers. Performing a manipulation of the argument modules/dims result...
