37172 matches found
CraftCMS's `ElementSearchController` Affected by Blind SQL Injection
The ElementSearchController::actionSearch endpoint is missing the unset protection that was added to ElementIndexesController in GHSA-2453-mppf-46cj. The exact same SQL injection vulnerability including criteriaorderBy, the original advisory vector works on this controller because the fix was nev...
Missing Authorization
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Missing Authorization via the generic /classes/GraphQLConfig and /classes/Audience REST API routes, which do not enforce...
EUVD-2026-10865
Parse Server has a bypass of class-level permissions in LiveQuery...
The vulnerability of the ath12k_dp_tx() function in the drivers/net/wireless/ath/ath12k/dp_tx.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ath12kdptx function in the drivers/net/wireless/ath/ath12k/dptx.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an...
Code execution vulnerability in multiple Mozilla products (CNVD-2026-13445)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products due t...
PT-2026-24859
A vulnerability was found in 0xKoda WireMCP up to 7f45f8b2b4adeb76be8c6227eefb38533fdd6b1e. Impacted is the function server.tool of the file index.js of the component Tshark CLI Command Handler. The manipulation results in os command injection. The attack needs to be approached locally. The explo...
Fedora: Security Advisory (FEDORA-2026-7b9874a01f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-24843
Name of the Vulnerable Software and Affected Versions xierongwkhd weimai-wetapp versions prior to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2 Description A security issue exists in xierongwkhd weimai-wetapp. The getAdmins function within the file source-code/src/main/java/com/moke/wp/wx...
PT-2026-24849
Name of the Vulnerable Software and Affected Versions xierongwkhd weimai-wetapp versions up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2 Description A flaw exists in xierongwkhd weimai-wetapp. The issue affects the getLikeMovieList function within the file source-code/src/main/java/com/moke/wp/wx...
The vulnerability of the drm/tegra component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the drm/tegra component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows a perpetrator to cause service failures...
Crafter CMS 安全漏洞
Crafter CMS is an open-source content management system CMS designed for digital experience applications. Versions of Crafter CMS prior to 5.9.7 and 4.17.3 contained security vulnerabilities. These vulnerabilities stemmed from the striptags function, which failed to filter URL schemes, potentiall...
Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2026-13447)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in several Mozilla produc...
PT-2026-24839
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, stored cross-site scripting XSS in the Graphical Pain Map "clickmap" form allows any authenticated clinician to inject arbitrary JavaScript that executes in the browser of...
CVE-2026-23216 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23216 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-58190 affecting package kubernetes for versions less than 1.30.10-21
CVE-2025-58190 affecting package kubernetes for versions less than 1.30.10-21. A patched version of the package is available...
CVE-2025-71162 affecting package kernel for versions less than 6.6.126.1-1
CVE-2025-71162 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23060 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23060 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10
CVE-2025-58190 affecting package docker-buildx for versions less than 0.14.0-10. A patched version of the package is available...