PT-2026-93621

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the ALSA harmony component, the snd harmony create function registers the IRQ before initializing the h-lock and h-mixer lock variables. This sequence allows a pending interrupt to...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37975)

Sales and Inventory System is a sales and inventory management enterprise resource planning system developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter ID with...

Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37858)

Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability, which stems from issues with the permission control in the app lock module. Attackers can exploit this vulnerability to...

CVE-2026-92406: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btnfunctions.php?action=add. Performing a manipulation of the argument difficultyid results in sql injection. Remote exploitatio...

CVE-2026-92601: Missing Authorization

Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where requiredPermission defaults to false and is not overridden by any action methods. Authenticated users without assigned roles can exploit this to create, edit, delete, publish and retract system-wide...

CVE-2026-92366: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part of the file /search.php of the component Regular Search. This manipulation of the argument sex/mothertongue/maritialstatus/country/state/religion/agemin/agemax causes sql injection. The attack can...

CVE-2026-84408: Exposed IOCTL with Insufficient Access Control

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges...

SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37976)

Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter named...

PT-2026-93707

Name of the Vulnerable Software and Affected Versions yshop-crm versions prior to 2.1.4 Description An authorization failure exists in the 'GET /admin-api/system/user/page' endpoint because the @PreAuthorize annotation is commented out. This allows authenticated back-office users who lack the...

PT-2026-93956

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Description Insufficient validation of user-supplied input allows an authenticated remote attacker with high-privileged administrative credentials to execute arbitrary commands on the underlying...

PT-2026-93665

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the f midi2 free ep reqs function when cleaning up an endpoint that was not initialized. This happens when the MIDI 2.0 gadget is configured via...

PT-2026-93740

A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /module/employee/index.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

PT-2026-93688

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/xe component where the get flat ccs offset function incorrectly rounds up the base of the flat CCS Compression Cache Storage storage to 128K. This rounding...

PT-2026-93983

Name of the Vulnerable Software and Affected Versions Cisco Secure Adaptive Security Appliance Software affected versions not specified Cisco Secure Firewall Threat Defense Software affected versions not specified Cisco Secure Firewall Management Center Software affected versions not specified...

PT-2026-93492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2x00 dfs fce write function within the scsi qla2xxx driver. The function calls kstrtoul using a NULL result pointer, which leads to a NULL pointer dereference a...

PT-2026-93874

A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn functions.php?action=add. Performing a manipulation of the argument difficulty id results in sql injection. Remote...

PT-2026-93443

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the drm/nouveau/uvmm component. In nouveau uvmm bind job submit, the OP MAP SPARSE case creates a region but leaves the op-ops variable as NULL. If a...

PT-2026-93453

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the MES scheduler ring is skipped by the force-completion loop in the amdgpu device pre asic reset function because it lacks a drm...

PT-2026-93757

Name of the Vulnerable Software and Affected Versions Avast sandbox driver aswSnx.sys affected versions not specified Description Improper preservation of permissions in the aswSnx.sys minifilter driver on Windows allows a local, low-privileged attacker operating within the sandbox to escape file...

PT-2026-93630

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the validate hash algo function where the return value of dentry path is not properly validated. When a path exceeds the buffer, dentry path returns an ERR PTR...