291218 matches found
CVE-2026-90204
A flaw was found in the Linux kernel's OCFS2 Oracle Cluster File System 2 component. A local attacker could exploit a vulnerability where a corrupted filesystem metadata entry, specifically an append-DIO dinode, contains an out-of-range orphan slot value. The OCFS2 dinode validator fails to...
CVE-2026-90218
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Connection Manager Assistant CMA component. During asynchronous address resolution, a programming error could lead to a warning assertion in the restort function. This occurs when a device acquisition fails, but the resource ...
CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...
CVE-2026-109523 girishsaraf Online-Appointment-Booking-System AJAX Endpoint getclinic.php sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...
CVE-2026-109523
A SQL injection vulnerability exists in the AJAX Endpoint component of the girishsaraf Online-Appointment-Booking-System (affected up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in the functionality of the Admin/getclinic.php file, where manipulating the city/cid argu...
CVE-2026-90185
A flaw was found in the Linux kernel's nullblk module. This vulnerability occurs because concurrent operations on configfs attributes are not properly synchronized. A local user could exploit this timing issue to modify data during device setup, leading to an out-of-bounds memory access. This cou...
CVE-2026-90164
A flaw was found in the Linux kernel's ksmbd server component. During the server's initialization process, an error in setting up internal process entries or counters is not handled correctly. This oversight can result in the system attempting to access a null pointer, which may lead to a system...
CVE-2026-90155
A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. This vulnerability occurs due to improper handling of file lock requests. When filelock objects are freed while still part of the Virtual File System VFS blocked-request graph, it can lead to a system crash,...
CVE-2019-9193
EN GenPostgresRCEExploit is a PoC tool designed to exploit an authenticated Remote Code Execution RCE vulnerability in certain versions of PostgreSQL 9.3 - 11.7. It allows authenticated users to execute system commands on a PostgreSQL database server vulnerable to CVE-2019-9193. Features...
CVE-2026-109522 girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...
CVE-2026-109522 girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection
A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/deleteclinic.php of the component Admin CRUD Endpoint. The manipulation of the argument cid/did leads to sql injection...
CVE-2026-109522
The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the Admin CRUD Endpoint component. Specifically, an unknown function in the Admin/deleteclinic.php file is susceptible to exploitation via the manipulation of the cid/did arguments. This flaw allows fo...
CVE-2026-109521 girishsaraf Online-Appointment-Booking-System changebookingstatus.php sql injection
A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...
CVE-2026-109521
The girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5 ) is vulnerable to SQL injection due to insufficient sanitization of the dateselected argument within an unknown function in the changebookingstatus.php file. This vulnerability can be exploit...
ROOT-OS-UBUNTU-2404-CVE-2025-40347 CVE-2025-40347 in linux - Patched by Root
Root has patched CVE-2025-40347 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-46252 CVE-2026-46252 in linux - Patched by Root
Root has patched CVE-2026-46252 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-43456 CVE-2026-43456 in linux - Patched by Root
Root has patched CVE-2026-43456 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-21782 CVE-2025-21782 in linux - Patched by Root
Root has patched CVE-2025-21782 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...