CVE-2026-102126: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS weakness in Kiteworks Core could allow an administrator holding only a single, narrowly scoped delegated permission to store crafted content that later executes arbitrary JavaScript in the authenticated session of a System Administrator who views the affected pag...

PT-2026-103575

Name of the Vulnerable Software and Affected Versions Kiteworks appliance affected versions not specified Description A system notification template on the Kiteworks appliance is processed by a template engine that evaluates expressions within the stored template body. This allows an authenticate...

PT-2026-103550

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator with access to the key protecting submitted dat...

PT-2026-103124

Name of the Vulnerable Software and Affected Versions Cato Networks SDP Client for Windows versions prior to 6.12.6 Description A local privilege escalation issue exists due to improper validation of a client-supplied Security Identifier SID over a local Inter-Process Communication IPC named pipe...

PT-2026-103008

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer 0/admins/assessments/examproper/questions-view.php. Executing a manipulation of the argument ID can lead to sql injection. It is possible to...

PT-2026-103009

A vulnerability was identified in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer 0/admins/assessments/examproper/btn functions.php. The manipulation of the argument access code leads to sql injection. The attack can be initiated remotel...

PT-2026-105983

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...

PT-2026-103559

Name of the Vulnerable Software and Affected Versions Kiteworks Core affected versions not specified Description A stored cross-site scripting XSS weakness allows an administrator with limited delegated permissions to store crafted content. When a System Administrator views the affected page,...

PT-2026-103455

A weakness has been identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This affects the function mysqli query of the file admin/table booking.php. This manipulation of the argument Name causes sql injection. Remote exploitation of the attack ...

ROS-20260930-73-0146

The vulnerability of the nv3arb function in the Linux kernel’s drivers/video/fbdev/riva/rivahw.c file is related to incorrect zero division operations. Exploiting this vulnerability can allow an attacker to cause system failures...

PT-2026-103047

The Course Booking System WordPress plugin before 7.0.9 does not restrict access to its booking export, allowing unauthenticated users to download the name, email address and billing address of every customer who has booked a course...

PT-2026-103019

A security flaw has been discovered in SourceCodester Car Driving School Management System 1.0. Impacted is an unknown function of the file /classes/Master.php?f=save enrollment. The manipulation results in sql injection. The attack can be executed remotely. The exploit has been released to the...

PT-2026-103014

A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer 0/admins/assessments/examproper/exam-delete.php. The manipulation of the argument test id results in sql injection. The attack can be...

MFD controller driver Heap Buffer Overflow DoS

The vulnerability of the applesmcprobe function in the drivers/mfd/macsmc.c file of the MFD controller driver for the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...

Linux kernel cryptographic accelerator Heap Buffer Overflow DoS

The vulnerability of the ccmacdigest function in the drivers/crypto/ccree/cchash.c module of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...

amdxdna_ubuf_map Heap Buffer Overflow DoS

The vulnerability of the amdxdnaubufmap function in the drivers/accel/amdxdna/amdxdnaubuf.c driver for Linux kernel-based computing devices involves improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to cause system failures...

Linux kernel DRI Heap Buffer Overflow DoS

The vulnerability of the vc4savehangstate function in the drivers/gpu/drm/vc4/vc4gem.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

CentOS Linux 8 [TuxCare] Security Update: systemd / systemd-container / systemd-devel / etc (CENTOS-STREAM8:CLSA-2026:1784813417)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1784813417 advisory. - systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with...

CVE-2026-102093: Improper Privilege Management

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full...

ROS-20260930-73-0003

The vulnerability of the asyncsetregisters function in the drivers/net/usb/rtl8150.c file of the Linux kernel’s USB network adapter driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...