CVE-2026-47228

Admidio is an open-source user management solution. modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember,...

CVE-2026-47228: Cross-Site Request Forgery (CSRF)

Admidio is an open-source user management solution. modules/registration.php mode sendlogin regenerates a random password for useruuidassigned, stores its bcrypt hash in admusers.usrpassword, and emails the cleartext to that user. Every other state-changing mode in the same file assignmember,...

The vulnerability of the `send_login()` and `handle_query_ip_offload_rsp()` functions in the `drivers/net/ethernet/ibm/ibmvnic.c` module of the Ethernet network adapter driver for Linux operating systems allows a hacker to access protected information or cause service failures.

The vulnerability of the sendlogin and handlequeryipoffloadrsp functions in the drivers/net/ethernet/ibm/ibmvnic.c module of the Ethernet network adapter driver for the Linux operating system lies in the copying of buffers without checking the size of the input data a classic buffer overflow...