winbond_spinand_table Structure Memory Map DoS

The vulnerability of the “winbondspinandtable” structure definition in the drivers/mtd/nand/spi/winbond.c module – Linux’s memory driver support mechanism – is related to a violation of the buffer boundary. Exploiting this vulnerability could allow an attacker to cause a system failure...

gpio-virtuser driver Buffer Overflow DoS

Vulnerability of the function gpiovirtusermakelookuptable in the driver/gpio/gpio-virtuser.c module – The Linux kernel’s GPIO support driver has a vulnerability related to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacke...

Number withdrawal

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a misplaced exception handling table comment in clearuserrepgood, which could cause the kernel to crash...

EUVD-2025-201600

A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxfdumptabledemo.php. The manipulation of the argument gblOrgID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

CVE-2025-14189 Chanjet CRM jxf_dump_table_demo.php sql injection

A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxfdumptabledemo.php. The manipulation of the argument gblOrgID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

CVE-2025-14189

CVE-2025-14189 affects Chanjet CRM up to 20251121 (and prior versions). The vulnerability is a SQL injection in an unknown function of the file /tools/jxf_dump_table_demo.php caused by improper handling of the gblOrgID parameter. It can be exploited remotely and public exploit code exists. Affect...

CVE-2025-14189 Chanjet CRM jxf_dump_table_demo.php sql injection

A vulnerability was detected in Chanjet CRM up to 20251121. Affected is an unknown function of the file /tools/jxfdumptabledemo.php. The manipulation of the argument gblOrgID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor w...

PT-2025-49402

Name of the Vulnerable Software and Affected Versions Chanjet CRM versions prior to 20251122 Description A SQL injection issue exists in Chanjet CRM. The issue is related to the manipulation of the gblOrgID parameter within the /tools/jxf dump table demo.php file. This manipulation affects an...

Chanjet CRM SQL injection vulnerability

Chanjet CRM is a customer relationship management system from China's Chanjet. A SQL injection vulnerability exists in Chanjet CRM 20251121 and earlier versions, which stems from incorrect manipulation of the parameter gblOrgID in the file /tools/jxfdumptabledemo.php, which could lead to SQL...

PT-2026-23740

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.46 Description The software contains a double free issue when processing specially crafted ELF binaries with incorrect relocation data. Specifically, during Global Offset Table GOT relocation processing, the dum...

drm/msm: Fix pgtable prealloc error path

...

CVE-2025-66551

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3...

CVE-2025-40218

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pteoffsetmaplock until success DAMON's virtual address space operation set implementation vaddr calls pteoffsetmaplock inside the page table walk callback function. This is for reading and writing pa...

CVE-2025-66553 Nextcloud Tables app allowed users to view columns metadata information of any table

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.7 and 0.9.4, authenticated users were able to view meta data of columns in other tables of the Tables app by modifying the numeric ID in a request. This vulnerability is fixed in 0.8.7 and 0.9.4...

CVE-2025-66551

Nextcloud Tables contains an ownership-check vulnerability: a malicious user could create a table and move a column into another user’s table due to a missing ownership validation. Affected versions are before 0.8.6 and before 0.9.3. The issue is resolved by upgrading to 0.8.6 or 0.9.3, per multi...

EUVD-2025-201440

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3...

CVE-2025-66551 Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.6 and 0.9.3, a malicious user was able to create their own table and then move a column to a victims table. This vulnerability is fixed in 0.8.6 and 0.9.3...

CVE-2025-66513

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table numeric ID is shared with which groups or users and the respective permissions was not limited to privileged users. This vulnerability is fixed in 0.8.9,...

EUVD-2025-201441

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table numeric ID is shared with which groups or users and the respective permissions was not limited to privileged users. This vulnerability is fixed in 0.8.9,...

CVE-2025-66513 Nextcloud Tables app share information not limited to relevant users

Nextcloud Tables allows you to create your own tables with individual columns. Prior to 0.8.9, 0.9.6, and 1.0.1, the information which table numeric ID is shared with which groups or users and the respective permissions was not limited to privileged users. This vulnerability is fixed in 0.8.9,...