ND Booking < 2.5 - Unauthenticated Options Change

The Hotel Booking WordPress plugin ND Booking 2.5 was affected by an Unauthenticated Options Change security vulnerability. id: CVE-2019-15774 info: name: ND Booking 2.5 - Unauthenticated Options Change author: popcorn94 severity: medium description: | The Hotel Booking WordPress plugin ND Bookin...

CVE-2026-114702

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

CVE-2026-114702

The ND Shortcodes For Visual Composer WordPress plugin (versions 7.8 and below ) is vulnerable to Stored Cross-Site Scripting (XSS) . This issue stems from the improper neutralization of input during web page generation , allowing an attacker to inject malicious scripts. While the vulnerability w...

CVE-2026-114702 WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

CVE-2026-114702 WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

EUVD-2026-108083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This issue affects ND Shortcodes For Visual Composer: from n/a through 7.8...

WordPress ND Shortcodes For Visual Composer plugin <= 7.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin ND Shortcodes For Visual Composer versions = 7.8...

PT-2026-121318

Name of the Vulnerable Software and Affected Versions ND Shortcodes For Visual Composer versions prior to 7.9 Description The nd-shortcodes component contains a flaw involving improper neutralization of input during web page generation, which enables Stored Cross-site Scripting XSS. Stored XSS...

nicdark ND Shortcodes Cross-site Scripting Vulnerability

NicDark ND Shortcodes versions 7.8 and earlier contain a cross-site scripting vulnerability. This flaw stems from improper input sanitization during web page generation, potentially enabling stored cross-site scripting attacks...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net:vxlan: Fixed a NULL dereference of ndtbl when IPv6 is disabled. When booting with the ‘ipv6.disable=1’ parameter, the ndtbl is never initialized because inet6init exits before ndiscinit is called, which is responsible for...

Astra Linux – vulnerability in linux-5.10, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: nvdimm: Fix firmware activation deadlock scenarios Lockdep reports the following deadlock scenarios for CXL root devices: power-management, deviceprepare, operations, and deviceshutdown operations for ‘ndregion’ devices: Chain...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bridge: brndsend: Validates the lengths of ND options. The brndsend function checks the ND options based on the lengths provided for those options. A malformed option may cause the parser to progress beyond the calculated option...

CVE-2026-90106

A flaw was found in the Linux kernel's bridge ARP/ND Address Resolution Protocol/Neighbor Discovery proxy. When the neighbor hardware address HA is read directly, it can result in torn or partial reads if the neighbor entry is simultaneously being updated. This data inconsistency could lead to...

Rocky Linux 10.2 [CIQ] Security Update: dhcpcd / dhcpcd-debuginfo / dhcpcd-debugsource (crlsa-2026_54210)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202654210 advisory. dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length IPv6 ND option in Router Advertisement handling CVE-2026-14258 Tenable has extracted the...

PT-2026-98752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bonding ALB Adaptive Load Balancing component where the alb determine nd function uses icmp6 hdrskb to inspect ICMPv6 headers. In certain transmission paths, such ...

SUSE CVE-2026-90106

In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address...

Linux Distros Unpatched Vulnerability : CVE-2026-90106

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being...

AZL-102432 CVE-2026-90106 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address...

DEBIAN-CVE-2026-90106

In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address...

CVE-2026-90106

In the Linux kernel, the following vulnerability has been resolved: net: bridge: arp/nd proxy: fix reading neigh ha Currently neigh ha address is read directly, but that can result in torn/partial reads if the neigh is being updated. Use neighhasnapshot to take a stable snapshot of the address...