39664 matches found
PT-2026-29029
Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...
CVE-2026-30082
Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...
CVE-2026-30082
IngEstate Server v11.14.0 is vulnerable to multiple stored cross-site scripting (XSS) vulnerabilities within the Edit feature of the Software Package List page. The root cause is the improper neutralization of input, specifically via the About application , What's news , or Release note parameter...
PT-2026-29117
Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.0.0 Description CI4MS, a CodeIgniter 4-based CMS skeleton, does not properly sanitize user-controlled input within System Settings – Mail Settings. Configuration fields, including Mail Server, Mail Port, Email...
CVE-2026-30082
Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...
The vulnerability of the v4l2_fwnode_parse_link() function in the drivers/media/v4l2-core/v4l2-fwnode.c file of the Linux kernel’s multimedia device driver allows a hacker to induce a service failure.
The vulnerability of the v4l2fwnodeparselink function in the drivers/media/v4l2-core/v4l2-fwnode.c file of the Linux multimedia device driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the __gtp_encapdestroy() function in the drivers/net/gtp.c driver for network devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the gtpencapdestroy function in the drivers/net/gtp.c driver for Linux kernel network devices is related to the use of memory after release. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
The vulnerability of the ov5648_remove() function in the drivers/media/i2c/ov5648.c driver for multimedia devices in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ov5648remove function in the drivers/media/i2c/ov5648.c file of the Linux multimedia device driver module is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the wx_setup_rx_resources() function in the drivers/net/ethernet/wangxun/libwx/wx_lib.c file of the Linux kernel-based Ethernet network adapter driver allows a hacker to cause a service failure.
The vulnerability of the wxsetuprxresources function in the drivers/net/ethernet/wangxun/libwx/wxlib.c file of the Linux kernel’s Ethernet network adapter driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
The vulnerability of the st_of_quadfs_setup() function in the drivers/clk/st/clkgen-fsyn.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.
The vulnerability of the stofquadfssetup function in the drivers/clk/st/clkgen-fsyn.c file of the Samsung Exynos CPU driver for Linux operating systems is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the ptp_qoriq_probe() function in the drivers/ptp/ptp_qoriq.c module of the Linux kernel’s PTP driver allows a hacker to trigger a service failure.
The vulnerability of the ptpqoriqprobe function in the drivers/ptp/ptpqoriq.c module of the Linux kernel’s PTP driver is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failure...
The vulnerability of the nvmem_register() function in the drivers/nvmem/core.c module of the NVMEM device driver framework for the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the nvmemregister function in the drivers/nvmem/core.c module of the NVMEM device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the `ksmbd_session_rpc_open()` function in the `fs/ksmbd/mgmt/user_session.c` file of the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the ksmbdsessionrpcopen function in the fs/ksmbd/mgmt/usersession.c file of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability may allow a remote attacker to cause service interruptions...
The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the `virtio_crypto_alg_skcipher_close_session()` function in the `drivers/crypto/virtio/virtio_crypto_skcipher_algs.c` driver of the Linux kernel’s cryptographic accelerator allows a hacker to trigger a service failure.
The vulnerability of the virtiocryptoalgskcipherclosesession function in the drivers/crypto/virtio/virtiocryptoskcipheralgs.c driver of the Linux kernel’s cryptographic accelerator is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a servic...
Security update for obs-service-set_version (moderate)
openSUSE Security Update: Security update for obs-service-setversion Announcement ID: openSUSE-SU-2026:0108-1 Rating: moderate References: 1072359 1212476 866966 Cross-References: CVE-2014-0593 Affected Products: openSUSE Backports SLE-15-SP7 An update that solves one vulnerability and has two...
Security update for libjxl (moderate)
openSUSE Security Update: Security update for libjxl Announcement ID: openSUSE-SU-2026:0107-1 Rating: moderate References: 1258090 Cross-References: CVE-2025-12474 CVSS scores: CVE-2025-12474 SUSE: 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Affected Products: openSUSE...
FreeRDP 资源管理错误漏洞
FreeRDP is an open source Remote Desktop Protocol RDP implementation library and client . FreeRDP suffers from a double release vulnerability. The vulnerability is caused by a double release problem in the memory release process of the kerberosAcceptSecurityContext and...
Fedora: Security Advisory (FEDORA-2026-cc466cfb57)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-32344
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter ipset component where the mtype del function fails to drop logically empty buckets. The function counts empty slots below n-pos in k, but only drops the...