85076 matches found
PT-2026-96104
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.47 Description An issue exists where the software identifies existing reports using a UUID without verifying if the report belongs to the same event. An attacker with editor access to at least one event who knows or...
Linux Distros Unpatched Vulnerability : CVE-2026-90197
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HID: haptic: don't write an uninitialized value to unhandled usages filleffectbuf initializes value only for the four haptic usages handled by its switch, but...
CVE-2026-90197 HID: haptic: don't write an uninitialized value to unhandled usages
In the Linux kernel, the following vulnerability has been resolved: HID: haptic: don't write an uninitialized value to unhandled usages filleffectbuf initializes value only for the four haptic usages handled by its switch, but writes it to field-value for every usage. An unhandled usage can...
poc-ghas-vulnerability-report-generator
GHAS Vulnerability Report Generator !WARNING This proof...
USN-8777-1: GNU Bison vulnerability
It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker could possibly use this issue to execute arbitrary code...
poc-ghas-vulnerability-report-generator
GHAS Vulnerability Report Generator !WARNING This proof...
CVE-2026-54524: Improper Neutralization of Special Elements used in an SQL Command
Frappe HR is an open-source human resources management solution HRMS. Prior to 16.7.0, an authenticated user with the HR User role can inject SQL through filters in the Salary Payments Based on Payment Mode report. In...
PT-2026-95065
Name of the Vulnerable Software and Affected Versions Frappe HR versions prior to 16.7.0 Description An authenticated user with the HR User role can perform SQL injection through filters in the Salary Payments Based on Payment Mode report. The issue occurs in the salary payments based on payment...
PT-2026-94477
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio balloon driver where the absence of a specific .shutdown handler allows the generic virtio bus shutdown process to break and reset the device while...
PT-2026-94985
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the HID core. When a driver's probe process calls hid device io start to enable input delivery but subsequently fails during initialization, it unwinds v...
WordPress Ni WooCommerce Sales Report plugin < 4.2.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by Erwan LR WPScan in WordPress Plugin Ni WooCommerce Sales Report versions 4.2.0...
CVE-2026-92137
Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is contained within the build directory on the Jenkins controller, allowing attackers with Item/Configure permission to create or replace arbitrary files on the...
CVE-2026-89999
CVE-2026-89999 is an out-of-bounds read in the Linux kernel's HID wacom driver , specifically in wacom_intuos_pro2_bt_irq(). The function receives the wire report length but never validates it before parsing; sub-parsers dereference wacom->data at fixed offsets (up to byte 285 for INTUOSP2_BT/...
CVE-2026-89999 HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacomintuospro2btirq wacomintuospro2btirq receives the wire report length in len but never consults it before parsing. After the report-id gate it unconditionally calls wacomintuospro2btpen a...
CVE-2026-78474
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...
CVE-2026-78472
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
WordPress Ni WooCommerce Sales Report plugin < 4.2.0 - Unauthenticated Order and Customer Data Disclosure vulnerability
Unauthenticated Order and Customer Data Disclosure vulnerability discovered by ryan fabella in WordPress Plugin Ni WooCommerce Sales Report versions 4.2.0...
CVE-2026-78472 Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' Parameter
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...
CVE-2026-78474 Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated Order and Customer Data Disclosure via 'btn_print' Parameter
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not have any authentication or authorisation checks on one of its report-printing routines, allowing unauthenticated users to retrieve WooCommerce order details and customer contact information, to target an individual order, and ...
CVE-2026-78472 Ni WooCommerce Sales Report < 4.2.0 - Unauthenticated SQLi via 'sort' Parameter
The Ni WooCommerce Sales Report WordPress plugin before 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks...