CVE-2026-98913 net: thunderx: fix PTP device ref leak in nicvf_probe()

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvfprobe caviumptpget acquires a reference to the PTP PCI device through pcigetdevice. If any initialization step fails after caviumptpget, the PTP PCI device reference is leaked. Add a...

CVE-2026-4952

The VertiGIS WebOrderSystem (specifically version 7.0.8.6 and potentially others) is vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists in the "ASMobile" web interface of the "GIS Portal" package, where authenticated users can input JavaScript into a business reference field. While...

a2sv

1. A2SV? Auto Scanning to SSL Vulnerability. HeartBleed, CCS Injection, SSLv3 POODLE, FREAK... etc A. Support Vulnerability - CVE-2007-1858 Anonymous Cipher - CVE-2012-4929 CRIMESPDY - CVE-2014-0160 CCS Injection - CVE-2014-0224 HeartBleed - CVE-2014-3566 SSLv3 POODLE - CVE-2015-0204 FREAK Attack...

PT-2026-122155

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll tick including .tick.await and the multi-threaded runtime's time driver could drop an internal timer entry without synchronizing with the driver thread that was firing it. The ra...

PT-2026-122205

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.2 Description An attacker can craft a PDF file with a standard cross-reference table where the declared entry count exceeds the actual capacity of the file. When such a file is opened, it leads to excessive...

PT-2026-122206

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.21.2 Description An incomplete remediation for repeated malformed cross-reference entries allows a crafted PDF to trigger a complete PDF stream reload during each recovery attempt, even when a recovery cache is presen...

CVE-2026-115329

Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.getobject that uses an unscoped queryset without organization filtering or permission checks. Authenticated users or API keys from any organization can supply another organization's subscription...

EUVD-2026-108131

Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.getobject that uses an unscoped queryset without organization filtering or permission checks. Authenticated users or API keys from any organization can supply another organization's subscription...

EUVD-2026-108128

QloApps through 1.7.0 contains an insecure direct object reference vulnerability in OrderDetailController::displayAjaxSubmitRefundRequest that allows authenticated customers to submit refunds for other customers' service lines. Attackers can submit foreign idserviceproductorderdetail values with...

CVE-2026-98698

A flaw was found in the Linux kernel's mac80211 wireless subsystem. When handling a Fast Initial Link Setup FILS association request frame with an empty payload, the system fails to validate zero-length plaintext before cryptographic processing. This issue causes an invalid memory reference to be...

CVE-2026-98679

A flaw was found in the Linux kernel's KXCJK-1013 accelerometer driver. A local user could exploit this flaw by submitting duplicate event disable requests to the device configuration interface. Because the driver does not filter repeated disable requests, it improperly releases a runtime power...

CLEANSTART-2026-BX50217 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

CVE-2026-91777 affects multiple packages. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. See references for individual vulnerability details...

Citrix XenServer 8.4.x Page Reference Leak (CTX697170)

The version of Citrix XenServer installed on the remote host is 8.4.x. It is, therefore, affected by a vulnerability as referenced in the CTX697170 advisory: - The grant table cache-flush error path fails to drop a page reference, which may allow a privileged user in a guest VM to compromise or...

SUSE CVE-2026-98690

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...

SUSE CVE-2026-98851

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: drop flowtable reference on init error path nftflowoffloadinit bumps the flowtable use count with nftuseinc before calling nfctnetnsget. When the latter fails, the error is returned as-is and the...

CVE-2026-113794

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

EUVD-2026-107335

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

CVE-2026-113794

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

PT-2026-120665

pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf to mishandle the unexpected end of file and enter an infinite loop. This issue is fixed in version 6.20.0...

MariaDB Name Reference Code Execution

The vulnerability of the MariaDB database management system is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...