5682 matches found
CVE-2026-98328
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scanieslen. Otherwise, building probe request...
EUVD-2026-93313
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the probe request for every band if 6 GHz is supported, so add the size to scanieslen. Otherwise, building probe request...
EUVD-2026-93114
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
CVE-2026-98185
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiexret80211scan subtracts the fixed response fields and the firmware-provided BSS length from resp-size without first proving that either extent fits. A short response or oversize...
EUVD-2026-93275
Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...
CVE-2026-39768
The Security & Malware scan by CleanTalk WordPress plugin (versions
CVE-2026-39768 WordPress Security & Malware scan by CleanTalk plugin <= 2.189 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...
CLEANSTART-2026-AJ37436 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
Security vulnerability affects the trino package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID...
PT-2026-106514
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mwifiex ret 802 11 scan function where the system subtracts fixed response fields and the firmware-provided BSS length from resp-size without verifying if these exten...
CVE-2026-98186: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiexsearchouiinie reads a pairwise-cipher PTK count from a beacon/probe-response RSN or WPA information element and then walks that many 4-byte OUIs, comparing...
PT-2026-106440
Unauthenticated Cross Site Scripting XSS in Security & Malware scan by CleanTalk = 2.189 versions...
PT-2026-106657
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mac80211 wifi module where the HE 6 GHz Band Capability element is included in the probe request for every band when 6 GHz is supported. Failure to include the size o...
PT-2026-106670
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the cfg80211 component of the wifi subsystem. When a network interface is taken down during an active scan, cfg80211 completes the scan for userspace...
stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
Summary The JSONC parser stream-json/jsonc/parser.js and verifier stream-json/jsonc/verifier.js scan a comment for its terminator starting from the comment's opening / on every input chunk. When a comment doesn't finish inside the current buffer, the scanner returns the comment's start offset and...
NPM: stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
NPM: stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk vulnerability discovered by ? in WordPress Npm stream-json versions = 3.5.0...
CVE-2026-90194
A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI scan module. When a device fails to add, the system's rollback process does not properly clean up allocated bus IDs and instance numbers. This oversight can lead to a resource leak, potentially causing a Denial...
undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...
WordPress Security & Malware scan by CleanTalk plugin <= 2.189 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Security & Malware scan by CleanTalk versions = 2.189...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad7923: Fixed buffer overflow issues for txbuf and ringxfer. The AD7923 was updated to support devices with 8 channels, but the sizes of txbuf and ringxfer were not adjusted accordingly, resulting in a potential buffer...