CVE-2026-1753 Gutena Forms < 1.6.1 - Contributor+ Arbitrary Limited Options Update

The Gutena Forms WordPress plugin before 1.6.1 does not validate option to be updated, which could allow contributors and above role to update arbitrary boolean and array options such as userscanregister...

CVE-2019-25484: Out-of-bounds Write

WinMPG iPod Convert 3.0 contains a buffer overflow vulnerability in the Register dialog that allows local attackers to crash the application by supplying an oversized payload. Attackers can paste a large string of characters into the User Name and User Code field to trigger a denial of service...

The vulnerability of the io_register_pbuf_ring() function in the io_uring/kbuf.c module, a synchronous input/output interface for the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the ioregisterpbufring function in the iouring/kbuf.c module, a component of the Linux kernel’s asynchronous input/output interface, relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to cause...

PT-2026-24778

WinMPG iPod Convert 3.0 contains a buffer overflow vulnerability in the Register dialog that allows local attackers to crash the application by supplying an oversized payload. Attackers can paste a large string of characters into the User Name and User Code field to trigger a denial of service...

EUVD-2026-10832

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-10833

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0108

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0108

The PowerVR GPU contains a vulnerability due to incorrectly configured register protection . This flaw could lead to local information disclosure without requiring additional execution privileges or user interaction. The vulnerability affects Google Pixel devices. Remediation is available via sec...

CVE-2026-0108

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0108

The register protection of the PowerVR GPU is incorrectly configured. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Admidio 安全漏洞

Admidio is a set of open-source member management systems developed by the Admidio team. This system supports features such as member lists, event management, message boards, photo albums, and downloads. Versions of Admidio prior to 5.0.6 contained security vulnerabilities. These vulnerabilities...

PT-2026-24437

Name of the Vulnerable Software and Affected Versions PowerVR GPU affected versions not specified Description The register protection of the PowerVR GPU is incorrectly configured, potentially leading to local information disclosure. Exploitation does not require additional execution privileges or...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from improper configuration of PowerVR GPU register protections, potentially leading to the leakage of local information...

The vulnerability of the dm_pool_registermetadata_threshold() function in the drivers/md/dm-thin-metadata.c driver for multiple device-based systems (RAID and LVM) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmpoolregistermetadatathreshold function in the drivers/md/dm-thin-metadata.c driver for multiple device-based systems RAID and LVM in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the register_shm_helper() function in the drivers/tee/tee_shm.c module of the Linux kernel’s secure execution environment driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the registershmhelper function in the drivers/tee/teeshm.c file, a driver for the secure execution environment of the Linux kernel, is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2026-30927

Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/eventsfunction.php, the event participation logic allows any user who can participate in an event to register OTHER users by manipulating the useruuid GET parameter. The condition uses || OR, meaning if...

EUVD-2026-10439

Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/eventsfunction.php, the event participation logic allows any user who can participate in an event to register OTHER users by manipulating the useruuid GET parameter. The condition uses || OR, meaning if...

Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter

Vulnerability In modules/events/eventsfunction.php, the event participation logic allows any user who can participate in an event to register OTHER users by manipulating the useruuid GET parameter. Line 47: $getUserUuid = admFuncVariableIsValid$GET, 'useruuid', 'uuid', ... Line 424: if...

PT-2026-36386

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The dt2815 driver crashes when attached to I/O ports without actual hardware present. This occurs because users can attach the driver to arbitrary I/O addresses via the 'COMEDI DEVCONFIG...

Unity Linux 20.1070e Security Update: xorg-x11-server (UTSA-2026-005927)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005927 advisory. A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister function. The highest...