PT-2026-79431

A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...

PT-2026-80322

Vulnerability Details File: src/lib/addons/feature-event-formatter-md.ts Line: 355 in v8.0.1; format method Root Cause FeatureEventFormatterMd.format does: ts Mustache.escape = text = text; const text = Mustache.renderaction, context; mustache pinned ^4.2.0, confirmed installed 4.2.0 keeps escape...

PT-2026-79289

A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102019)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102019 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages BUG There is an...

Linux Distros Unpatched Vulnerability : CVE-2026-15686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer multiquery Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libssh2 (UTSA-2026-102704)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102704 advisory. libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c that allows a malicious...

PT-2026-79408

UAC Unix-like Artifacts Collector versions prior to 3.3.0 contain a command injection vulnerability in the run command function that allows attackers to execute arbitrary commands by injecting shell metacharacters into untrusted data such as usernames, process names, or filenames. Attackers can...

Linux Distros Unpatched Vulnerability : CVE-2022-4996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001455)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001455 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient ES...

PT-2026-79472

Name of the Vulnerable Software and Affected Versions kin-openapi versions 0.10.0 through 0.140.0 Description The openapi3filter.convertParseError function in openapi3filter/validation error encoder.go dereferences e.Parameter.In without verifying if e.Parameter is nil. When a multipart/form-data...

ROS-20260821-73-0027

The vulnerability of the iscsiswtcpconnsetparam function in the drivers/scsi/iscsitcp.c file of the Linux SCSI device driver is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0024

The vulnerability of the gfxv90hwfini function in the drivers/gpu/drm/amd/amdgpu/gfxv90.c driver for AMD GPU cores in Linux operating systems is related to the use of a name with incorrect references. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260821-73-0014

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service...

ROS-20260821-73-0025

The vulnerability of the ionicdevlinkalloc function in the drivers/net/ethernet/pensando/ionic/ionicdevlink.c file of the Pensando Ethernet network adapter driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an...

ROS-20260821-73-0019

The vulnerability of the lastcmdset function in the kernel/trace/traceeventssynth.c module, which supports kernel tracing in Linux operating systems, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0010

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260821-73-0035

The vulnerability of the xc4000getfrequency function in the drivers/media/tuners/xc4000.c file of the Xceive XC4000 TV tuner driver for the Linux operating system is related to concurrent resource access race condition. Exploiting this vulnerability could allow a attacker to cause a service failu...

ROS-20260821-73-0030

The vulnerability of the batadvncskbdecodepacket function in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260821-73-0031

The vulnerability of the Linux kernel Bluetooth HCI driver implementation relates to competitive access to resources during the execution of the sniffmin,maxintervalset function in the net/bluetooth/hcidebugfs.c module. Exploiting this vulnerability allows a remote attacker to compromise the...