PT-2026-95025

Name of the Vulnerable Software and Affected Versions code-projects Matrimonial System version 1.0 Description A remote SQL injection exists in the /partner preference.php file. The issue occurs within the writepartnerprefs function when the education variable is manipulated, allowing an attacker...

CVE-2025-55787

A SQL injection vulnerability exists in MailData Email Archiving System v4.2 and earlier . This flaw allows an attacker to execute unauthorized SQL commands, potentially leading to high impact on confidentiality , integrity , and availability . While the vulnerability is confirmed in the provided...

EUVD-2025-210930

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...

CVE-2026-54343: Improper Limitation of a Pathname to a Restricted Directory

Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.1, a remote attacker can request a traversal path handled by SCORMRenderer.render in lms/pagerenderers.py. The renderer constructs and opens a server-side path without first...

CVE-2026-50610: Improper Access Control

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense due to insufficient access controls in a privileged service. An authenticated local user may be able to access the service and perform unauthorized registry modifications,...

CVE-2026-50606: Use of Hard-coded Cryptographic Key

A vulnerability has been identified in the Acer System Monitoring component included with NitroSense and PredatorSense. The vulnerability is caused by the use of a hard-coded AES encryption key within the software. Under certain circumstances, a local attacker may be able to use the embedded key ...

Linux kernel security vulnerabilities

The Linux kernel contains a security vulnerability. This vulnerability arises because the amdgpudmplanedrmplanereset function first releases an old state and then allocates a new one. When kzalloc fails, the state pointer is not updated, resulting in a null pointer that points to freed memory. Th...

PT-2026-94496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the NFSv4 implementation where nfs4 add lease may pass an incorrect argument to nfs4 delete lease during a race condition with a delegation return. Specifically, the...

PT-2026-94733

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.3 Description An issue exists in the md/raid1 component where adding a new rdev to an existing RAID1 array with the serialize policy enabled can lead to a system crash. This occurs because the bind rdev to array...

PT-2026-94752

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the cros ec debugfs probe function where the notifier panic is registered with the EC panic notifier chain, but the remove path fails to unregister it before tearing...

PT-2026-94980

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ASoC fsl audmix component where the AUDMIX block remains powered off after pm runtime enable until the first runtime resume occurs. Register writes performed betwe...

CVE-2026-90379: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash When an AER error occurs and the bus is hung, the register reads return 0xFFFFFFFF, causing the DMA queue state to be corrupted and resulting in an invalid...

PT-2026-94470

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the visconti clk register gate function where the clk init data structure is not fully initialized. Specifically, the function populates init.parent data but leaves...

PT-2026-94582

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Network File System NFS implementation where the client fails to record a delegation granted by the server during an OPEN reply. Specifically, the nfs inode set...

PT-2026-94903

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/rxe component where the responder state machine may reprocess a packet after the Queue Pair QP enters an error state. This occurs when do complete returns...

PT-2026-94534

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the null blk driver where resizing submit queues or poll queues via configfs on a device with shared tags enabled can lead to a kernel crash. When a shared tag set is...

PT-2026-94497

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue exists in the NFSv4/flexfiles component when interacting with NFSv4.0 data servers. The system incorrectly assumes that the data server client has a session, whi...

PT-2026-94866

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during the teardown of Display Manager DM I2C adapters. Because these adapters may remain visible to userspace while the teardown process is active, a concurrent...

PT-2026-94795

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the exfat file system where a race condition occurs when a shared writable mapping has its valid size extended via a buffered write or a page fault. In this scenario,...

PT-2026-94666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the FAT file system implementation where the fat rebuild parent function fails to release the buffer head stored in sinfo.bh after successfully rebuilding the parent...