CVE-2026-98310

The Linux kernel contains a vulnerability in the drm/xe driver where the __xe_shrinker_walk() function fails to acquire a runtime PM reference before walking the SYSTEM and TT LRUs . When shrinking a buffer outside of system memory while the GPU is runtime suspended, the invalidation of GPU mappi...

CVE-2026-98310 drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory

In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which needs...

CVE-2026-98310

In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory xeshrinkerwalk walks the SYSTEM and TT LRUs without a runtime PM reference. Shrinking a bo outside system memory invalidates its GPU mappings, which needs...

CVE-2026-98269 btrfs: abort transaction on failure to update inode for hole punching and reflinking

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...

CVE-2026-98269 btrfs: abort transaction on failure to update inode for hole punching and reflinking

In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the inode we error out without aborting the transaction, which can result in a persistent inconsistency if after the failur...

CVE-2026-105070

The WordPress Salon booking system plugin versions

CVE-2026-105070 WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Salon booking system = 10.31.7 versions...

CVE-2026-105070 WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Salon booking system = 10.31.7 versions...

EUVD-2026-93087

Unauthenticated Privilege Escalation in Salon booking system = 10.31.7 versions...

Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System

Summary Due to use of Golang Go multiple vulnerabilities affect IBM Cloud Pak System. IBM Cloud Pak System has addressed these vulnerabilities CVE-2025-47913, CVE-2025-47914, CVE-2025-58181 Vulnerability Details CVEID:CVE-2025-47913 DESCRIPTION: SSH clients receiving SSHAGENTSUCCESS when expectin...

CVE-2026-105807

A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sql injection. The attack can be initiated remotely...

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

EUVD-2026-93226

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105809 SourceCodester Simple Student Information System Profile Field register.php cross site scripting

A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profile Field Handler. The manipulation of the argument firstname/lastname leads to cross site scripting. The attack may be...

CVE-2026-105809

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located in the Profile Field Handler component, specifically within the register.php file. Attackers can initiate a remote attack by manipulating the firstname or lastname argum...

CVE-2026-104983

A flaw was found in Xreader. A remote attacker could provide a crafted document containing a malicious attachment filename that bypasses directory restrictions. If a user attempts to save the attachment, arbitrary files may be written or overwritten outside the intended target directory,...

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2026-105808 SourceCodester Simple Student Information System searchresults.php clean cross site scripting

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...

CVE-2026-105808

A cross-site scripting (XSS) vulnerability exists in SourceCodester Simple Student Information System 1.0 . The flaw is located within the clean function of the searchresults.php file. An attacker can perform a remote manipulation of the searchbox argument to execute the XSS attack. The exploit h...

EUVD-2026-93224

A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a manipulation of the argument searchbox can lead to cross site scripting. The attack can be launched remotely. The exploi...