296988 matches found
Huawei HarmonyOS/EMUI denial-of-service vulnerability
Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei EMUI is an emotional operating system developed by Huawei based on Android. Huawei HarmonyOS/EMUI has a denial-of-service vulnerability, which stems from a denial-of-servic...
PT-2026-93456
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/ttm component where the ttm pool restore and alloc function fails to drop tt-restore after a successful restore process completed via ttm pool restore commit...
SQL Injection Vulnerability in Sales and Inventory System (CNVD-2026-37976)
Sales and Inventory System is a business resource planning system for sales and inventory management developed by itsourcecode. The Sales and Inventory System has a SQL injection vulnerability. This vulnerability stems from the lack of validation for external SQL statements in the parameter named...
Linux Kernel Security Vulnerabilities
The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the curseg evacuation loop in freesegmentrange does not cover all curseg types. Non-persistent memory curseg types, such as CURSEGCOLDDATAPINNED and CURSEGALLDATAATGC, are missed. This could lead to...
PT-2026-93558
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the KVM arm64 component between VNCR TLB invalidation and the vcpu put function during VNCR page unmapping. The issue arises because TLB invalidation occurs...
PT-2026-93461
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A lock leak occurs during a GPU reset. The dm suspend function acquires the dc lock and expects dm resume to release it. However, if the functions amdgpu dm commit zero streams or dm dmu...
PT-2026-93591
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where batadv mcast forw packet and batadv mcast forw scrape may be called indirectly by batadv mcast forw mcsend. In this scenario, the socket...
PT-2026-93665
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference occurs in the f midi2 free ep reqs function when cleaning up an endpoint that was not initialized. This happens when the MIDI 2.0 gadget is configured via...
RockyLinux 8 : kernel-rt (RLSA-2026:67469)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67469 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address...
RockyLinux 8 : kernel (RLSA-2026:67468)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67468 advisory. kernel: EDAC/bluefield: Fix potential integer overflow CVE-2024-53161 kernel: wifi: mac80211: Discard Beacon frames to non-broadcast address...
CVE-2026-92405: Improper Neutralization of Special Elements used in an SQL Command
A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. The affected element is an unknown function of the file /index.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...
PT-2026-93389
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write exists in the xfrm6 input addr function. The issue occurs when the secpath is full, caused by an off-by-one error in the depth check. When the transport-mode recei...
PT-2026-93874
A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file /admins/assessments/databank/btn functions.php?action=add. Performing a manipulation of the argument difficulty id results in sql injection. Remote...
Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8761-1)
"The remote Ubuntu 24.04 LTS / Pro Realtime 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8761-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. Thi...
Malware in kartykp-prod-oidc-test-pkg
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2026-91734
An incorrect authorization flaw was found in the Core component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516780835...
Malware in kartykp-token-pkg
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
CVE-2026-83408
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle GraalVM for JDK 17: 23.0.13.1; Oracle GraalVM for JDK 21: 23.1.12.1; Oracle GraalVM: 25.0.4.1. Difficult to exploit vulnerability allows...
CVE-2026-92234
QloApps through 1.7.0 reflects unescaped child feature names into back-office validation error messages in the Hotel Reservation System feature management page. Authenticated back-office users who follow a crafted link can execute injected JavaScript in their administrative session via the...