ROS-20260720-73-0073

The vulnerability of the Sanitizer API on Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities can allow attackers to enhance...

The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code, gain unauthorized access to protected information, and redirect users to malicious websites.

The vulnerability of the FactoryTalk DataMosaix Private Cloud data management platform and its production process optimization capabilities is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

CVE-2026-64055

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets in an SKB from a ring buffer. If the ring buffer gets completely emptied during a poll cycle, we exit gmacrx, but the packet is not y...

CVE-2026-64140 ksmbd: fix null pointer dereference in proc_show_files()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in procshowfiles When a SMB2 client opens a file with a durable v2 handle and then issues SMB2 SESSIONLOGOFF, sessionfdcheck clears fp-tcon = NULL on the reconnectable file pointer but leaves t...

CVE-2026-64097

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating Why&How The GPIO pin table parsers in getgpioi2cinfo and biosparsergetgpiopininfo derive an element count from the VBIOS tableheader.structuresize field, then...

CVE-2026-64064

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfsinvalidatefolio to clear dirty bit if all changes gone If a streaming write is made, this will leave the relevant modified folio in a not-uptodate, but dirty state with a netfsfolio struct hung off of folio-privat...

CVE-2026-64056

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmacrx is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device ...

CVE-2026-64055

The CVE-2026-64055 issue is in the Linux kernel ethernet cortina driver (gmac_rx NAPI poll). A fragment counter (frag_nr) used to assemble SKB fragments could be reset to zero when the ring buffer emptied during a poll, leaving an incomplete SKB. The fix makes the RX fragment counter part of the ...

EUVD-2026-45628

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter The gmacrx NAPI poll function assembles packets in an SKB from a ring buffer. If the ring buffer gets completely emptied during a poll cycle, we exit gmacrx, but the packet is not y...

CVE-2026-63990 bonding: refuse to enslave CAN devices

In the Linux kernel, the following vulnerability has been resolved: bonding: refuse to enslave CAN devices syzbot reported a kernel paging request crash in canrxunregister inside net/can/afcan.c. The crash occurs because a virtual CAN device vxcan is being enslaved to a bonding master. During the...

OESA-2026-3003 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer...

The vulnerability of the Apache Fineract digital financial services platform, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

The vulnerability affects the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software management platform FortiSwitch Manager, and the FortiProxy proxy server for Internet attack protection. This allows a perpetrator to execute arbitrary code.

The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...

CVE-2026-56456 HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability.

HCL DFXAnalytics is affected by an Internal File Path Disclosure vulnerability. The application dashboard inadvertently leaks sensitive information regarding its internal file structure and directory paths through unhandled error messages, system logs, or debugging output, which could allow a...

EUVD-2026-44770

TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg read STransCompMsg.contLen when pHead-comp == 1 without first validating that the RPC packet contained the 8-byte STransCompMsg structure, causi...

UBUNTU-CVE-2026-46570

In NTFS-3G through 2026.2.25, a heap buffer overflow exists in ntfsindexwalkdown in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by reading crafted file metadata...

The vulnerability of the monitoring tools for VMware Aria, the virtualization platform VMware Cloud Foundation, and the telecommunications cloud platform VMware Telco Cloud Platform lies in the lack of security measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware Telco Cloud Platform, a virtualization platform, is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

ROS-20260714-73-0070

The vulnerability in Gitea is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Kimai: Login CSRF in Default Team Creation Endpoints Allows Unauthorized Team and Permission Structure Changes

Summary Kimai 2.56.0 contains authenticated cross-site request forgery issues in its default team creation shortcuts for projects, customers, and activities. These endpoints are exposed through GET routes and directly create or reuse a Team, add the current user as teamlead, and bind the target...