12958 matches found
SUSE CVE-2026-80685
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
WordPress Order Tip for WooCommerce plugin < 1.6.0 - Shop Manager+ Arbitrary File Deletion vulnerability
Shop Manager+ Arbitrary File Deletion vulnerability discovered by Shikhali Jamalzade in WordPress Plugin Order Tip for WooCommerce versions 1.6.0...
CVE-2026-80685
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
CVE-2026-80685
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
CVE-2026-80704 drm/amd/display: use proper context for logging
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...
CVE-2026-80685 mm/util: don't read __page_2 for order-1 folios in snapshot_page()
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
CVE-2026-80685 mm/util: don't read __page_2 for order-1 folios in snapshot_page()
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
CVE-2026-80685
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
EUVD-2026-67561
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
CVE-2026-80685
A Linux kernel vulnerability in the snapshot_page() function within mm/util causes an out-of-bounds read of the __page_2 field for order-1 folios allocated at the end of a vmemmap section . The function incorrectly reads __page_2 when nr_pages > 1, but should only do so when nr_pages > 2; s...
EUVD-2026-67571
The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site...
Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153)
Summary Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite CVE-2026-66010, CVE-2026-54515, CVE-2026-59889, CVE-2026-49844, CVE-2026-69153. Vulnerability Details CVEID:CVE-2026-66010 DESCRIPTION: DOMPurify before 3.4.12 fails to execute...
SUSE CVE-2026-72177
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damonsysfsaccesspatternadddirs and damonsysfsschemeadddirs...
PT-2026-82882
The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site...
CVE-2026-77701: Missing Authorization
The WCFM Marketplace WordPress plugin before 3.8.2 does not correctly verify that the person requesting a refund owns the order, allowing unauthenticated users to create refund requests against any guest checkout order on the site...
CVE-2026-80685: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: mm/util: don't read page2 for order-1 folios in snapshotpage snapshotpage currently reads page2 after checking nrpages 1, but it should only do so when nrpages 2. If an order-1 folio is allocated at the end of a vmemmap section,...
OpenSSH Cryptographic Protection Mechanism
The vulnerability of the OpenSSH cryptographic protection lies in the improper execution of certain operations. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise the integrity of those data...
PT-2026-82985
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the snapshot page function where the system reads the page 2 field after verifying that nr pages is greater than 1, whereas it should only occur when nr pages is great...
CVE-2026-74820
CVE-2026-74820 is a CRITICAL (CVSS 4.0: 10.0) SQL injection vulnerability in the ServiceNow AI platform , specifically through a Dynamic Schema ORDER BY clause . An unauthenticated user can, under certain circumstances, execute arbitrary SQL statements against the instance's underlying database, ...
CVE-2026-74820 Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or...