282 matches found
CVE-2026-119562
A flaw was found in phpMyAdmin. An authenticated user can exploit a Structured Query Language SQL injection vulnerability by submitting unescaped parameters to the central columns interface. Because these inputs are processed into database queries executed with elevated control user privileges, a...
CVE-2026-119562
Versions of phpMyAdmin through 5.2.3 are vulnerable to an SQL injection flaw. The vulnerability exists in the /database/central-columns endpoint, where unescaped col_extra and col_attribute values can be manipulated by authenticated users. This allows attackers to inject SQL into pma__central_col...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevents the release of buffers during I/O operations. When a task that is waiting for the completion of a Store Data operation is interrupted, an attempt is made to halt that operation. If this attempt fails due to a...
SUSE CVE-2026-13976
Insufficient data validation in Storage in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
Deserialization Of Untrusted Data
org.openidentityplatform.openam, openam-auth-webauthn is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the WebAuthn authentication module deserializing attacker-controlled data from a storage attribute under certain conditions, which allows an attacker to achieve...
Terraform Provider for Linode Debug Logs Vulnerable to Sensitive Information Exposure
Impact The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, object storage data, and NodeBalancer TLS keys in debug logs without redaction. Important: Provider debug logging is not enabled by default. This issue is...
Insertion of Sensitive Information into Log File
Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the provider debug logging. An attacker can obtain sensitive information such as passwords, StackScript content, and object storage data by accessing provider debug logs when it is...
CVE-2026-27900
The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs without redaction. Provider debug logging is not enabled by default. This issue is exposed when debug/provider logs are...
CVE-2009-4183
Unspecified vulnerability in HP OpenView Storage Data Protector 6.00 and 6.10 allows local users to obtain unspecified "access" via unknown vectors...
CVE-2025-65821
The Meatmeet Pro BBQ Thermometer is vulnerable because the ESP32 chip powering the device has an enabled UART download mode . This configuration allows an adversary to dump the flash memory to retrieve sensitive information, specifically Wi-Fi network details stored in the NVS partition . Further...
EUVD-2015-2226
Malware in sbrugna...
EUVD-2011-1515
Malware in sbrugna...
EUVD-2007-2276
Malware in sbrugna...
EUVD-2012-5143
Malware in sbrugna...
EUVD-2011-1862
Malware in sbrugna...
EUVD-2009-4153
Malware in sbrugna...
EUVD-2006-2579
Malware in sbrugna...
EUVD-2011-0301
Malware in sbrugna...