418584 matches found
PT-2026-98090
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ACPICA component due to an incorrect condition check for AML ELSE OP within the acpi ps parse loop function. Recommendations At the moment,...
PT-2026-98088
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists in the ACPICA component. This occurs due to missing boundary checks within the acpi ps get next field function. Recommendations At the moment, there ...
PT-2026-98078
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds access issue exists within the ACPICA component. This occurs due to missing boundary checks in the acpi ps get next namestring and acpi ps peek opcode functions...
PT-2026-98157
Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions 0.3.1 and 0.4.0 Description A flaw exists in the Socket.IO Connect Interface component within the app.py file. Remote manipulation of an unknown function in this file allows an attacker to bypass authentication...
CVE-2026-97225: Improper Control of Generation of Code
A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the component JSON Runner. Executing a manipulation of the argument comment.text/script.schedule can lead to code injection. The attack may be performed from...
CVE-2026-97155: Origin Validation Error
Fabasoft Folio Client before 2026, a locally installed component that communicates with the Fabasoft browser extension via web messaging, does not restrict which web origins may invoke its functions by default. The registry value VALIDDOMAINS, which limits permitted origins, was optional and empt...
ROS-20260924-73-0084
The vulnerability of the bpf component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-98087
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPICA component where the byte count is not properly validated during package length reading within the acpi ps get next package length function. Recommendations ...
CVE-2026-96880: Improper Authorization
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...
PT-2026-98271
A security flaw has been discovered in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.08. Affected by this vulnerability is the function validOAuthClientFromCache of the file yudao-module-system/src/main/java/cn/iocoder/yudao/module/system/service/oauth2/OAuth2ClientServiceImpl.java of the compone...
ROS-20260924-73-0072
The vulnerability of the imon.c component in the Linux operating system’s kernel is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
ROS-20260924-73-0013
The vulnerability of the devlink component in the Linux operating system’s kernel is related to the dereferencing of a pointer whose expiration time has expired. Exploiting this vulnerability can allow an attacker to trigger a service failure...
PT-2026-97701
Name of the Vulnerable Software and Affected Versions Fabasoft Folio Client versions prior to 2026 Description A locally installed component that communicates with the browser extension via web messaging does not restrict which web origins may invoke its functions by default. The registry value...
CVE-2026-97226: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in DbGate up to 7.2.5/7.3.1-premium-beta.1. This impacts the function fs.readFile of the file packages/api/src/controllers/files.js of the component files-style Endpoint. The manipulation of the argument filePath/uri leads to path traversal. It is possible to initia...
CVE-2026-96762: Authorization Bypass Through User-Controlled Key
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...
PT-2026-98096
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the RDMA counter component when the rdma counter bind qp function fails within alloc and bind. The error path jumps to err mode, which frees the counter but fails...
CVE-2026-96891: Out-of-bounds Write
A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnelsetparams of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peerhostname leads to out-of-bounds write. The attack may be initiated remotely...
PT-2026-98122
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the genirq/proc component where directory names for /proc/irq// are constructed using char name10 buffers via the sprintf function. When 10-digit interrupt numbers are...
PT-2026-97696
Name of the Vulnerable Software and Affected Versions D-Link DIR-825 version 3.00b32 Description A remote attack is possible due to an out-of-bounds write in the rp-l2tp component. The issue exists within the tunnel set params function located in the tunnel.c file, where manipulation of the peer...
CVE-2026-96898: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...