6947 matches found
SUSE CVE-2026-22978
In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user space / u16 length; / number of fields or size in bytes / u16 flags;...
Microsoft account
The vulnerability of the Microsoft account is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to replace the user’s credentials remotely...
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
CVE-2025-59473
CVE-2025-59473 is a SQL Injection vulnerability affecting the Structure plugin used within ExpressionEngine where admin-authenticated users can exploit missing input sanitization to inject SQL via the channel_ids parameter. The root cause is unsanitized user input being embedded directly in SQL q...
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
CVE-2025-59473
SQL Injection vulnerability in the Structure for Admin authenticated user...
kernel: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
A use-after-free vulnerability was found in the Linux kernel's Bluetooth HCI socket implementation. A race condition between socket bind and write operations allows mgmtpending to free a command structure while writeiter is still attempting to send it, resulting in use-after-free when the freed...
Advisory ROSA-SA-2026-3128
software: gnutls 3.8.10 OS: ROSA-CHROME unaffected versions = gnutls-3.8.10-1 affected versions gnutls-3.8.10-1 CVE-ID: CVE-2025-32988 BDU-ID: 2025-11076 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the asn1deletestructure function of the GnuTLS transport layer security library involves a memory...
PT-2026-4818
Name of the Vulnerable Software and Affected Versions Structure for Admin affected versions not specified Description A SQL Injection issue exists in the Structure for Admin authenticated user. The issue allows an attacker with admin access to enumerate or manipulate database records. This is due...
CVE-2025-59473: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in the Structure for Admin authenticated user...
QGIS QWC2 Code Execution
The vulnerability of the QGIS QWC2 web application is related to the lack of protective measures for the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Jenkins Plugin XSS
The vulnerability of the Jenkins automation server’s plugin-related to the lack of security measures for website structures. Exploiting this vulnerability allows attackers to perform cross-site scripting attacks remotely...
Microsoft Outlook Code Execution
The vulnerability of the Microsoft Outlook email client is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Outlook CSS Injection
The vulnerability of the Microsoft Outlook email client is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary CSS styles remotely...
AZL-78452 CVE-2026-22978 affecting package kernel for versions less than 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user space / u16 length; / number of fields or size in bytes / u16 flags;...
CVE-2026-22989
In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlockfilesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4revokestates acce...
CVE-2026-22978 wifi: avoid kernel-infoleak from struct iw_point
In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user space / u16 length; / number of fields or size in bytes / u16 flags;...
CVE-2026-22978
The CVE-2026-22978 issue lies in the Linux kernel wifi code where struct iw_point exposes a 32‑bit hole on 64‑bit arches, enabling kernel-infoleak to user space. The fix is to zero the iw_point structure before user-space access. This remediation is present in upstream kernel fixes (noted with ke...
Linux Distros Unpatched Vulnerability : CVE-2026-22978
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: avoid kernel-infoleak from struct iwpoint struct iwpoint has a 32bit hole on 64bit arches. struct iwpoint void user pointer; / Pointer to the data in user...