CVE-2026-16941 IBM i is Affected By An Incorrect Authorization Vulnerability []

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization...

EUVD-2026-71483

IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify certain system messages due to improper authorization...

CVE-2026-16941

IBM i versions 7.6, 7.5, and 7.4 (license product 5770-SS1 ) are affected by an incorrect authorization flaw (CWE-863 ) that allows a remote authenticated attacker to modify certain system messages , resulting in a limited integrity impact (CVSS 4.3, MEDIUM). No confidentiality or availability im...

CVE-2026-80828

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

AZL-99465 CVE-2026-80828 affecting package kernel 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80761

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname isosockgetname fills a struct sockaddriso in place and returns its size without clearing it first, so bytes it does not write are copied to user space from the kern...

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828 ALSA: usb-audio: Complete cleanup after system-resume errors

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usbaudioresume jumps to errout when sndusbpcmresume or sndusbmixerresume fails. The error path skips th...

CVE-2026-80828

CVE-2026-80828 affects the Linux kernel ALSA usb-audio subsystem. When usb_audio_resume() encounters a failure in snd_usb_pcm_resume() or snd_usb_mixer_resume() during system resume, it jumps to err_out, skipping the out: block that restores D0 power state and decrements chip->num_suspended_in...

CVE-2026-6958 Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe

Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine wvsc.exe that allows low-privileged local attackers to execute arbitrary code as SYSTEM by exploiting a missing hardcoded directory path for OpenSSL-related files...

CVE-2026-85517

A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehiclemanagement.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack...

CVE-2026-19081

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

CVE-2026-19057

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Stored XSS. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

CVE-2026-19727 HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Information and Document Automation Program allows XSS Targeting HTML Attributes. This issu...

CVE-2026-19081 Missing Authorization Allows Unauthorized Access to Critical POS Functions in Gastromenum's Gastromenum Ticket and QR Menu System

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

EUVD-2026-71104

Missing Authorization vulnerability in Gastromenum Gastromenum Ticket and QR Menu System allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Gastromenum Ticket and QR Menu System: before 2026.08.31...

CVE-2026-19081

CVE-2026-19081 is a Missing Authorization vulnerability in Gastromenum Ticket and QR Menu System , a point-of-sale (POS) and QR menu product. The flaw allows an authenticated low-privilege network user to access functionality not properly constrained by ACLs, specifically enabling unauthorized ac...

CVE-2026-19057

Gastromenum Ticket and QR Menu System is affected by a Stored Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. The flaw affects versions before 2026.08.31 . The CNA-assigned CVSS 3.1 score is 5.4 (Medium) , with an attack vector of ne...