EUVD-2026-55241

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator...

SUSE CVE-2026-64561

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...

CVE-2026-18032

The WP Data Access WordPress plugin before 5.5.79 does not validate the column names it accepts on one of its unauthenticated AJAX actions, and the nonce guarding that action does not cover them, allowing unauthenticated attackers to read arbitrary columns of the database table the affected...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...

WordPress Active Products Tables for WooCommerce plugin <= 1.1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Asim Alshaya in WordPress Plugin Active Products Tables for WooCommerce versions = 1.1.1...

CVE-2026-61964

Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...

CVE-2026-61964

Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...

EUVD-2026-53959

Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...

CVE-2026-61964

The CVE concerns WordPress Ninja Tables plugin

CVE-2026-61964 WordPress Ninja Tables plugin <= 5.2.9 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ninja Tables = 5.2.9 versions...

CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

DEBIAN-CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839 Popt-devel: popt-static: size_t underflow in singleoptionhelp

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

EUVD-2026-53642

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839 Popt-devel: popt-static: size_t underflow in singleoptionhelp

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of servi...

CVE-2026-18839

The CVE-2026-18839 vulnerability concerns the popt library: an integer size_t underflow occurs when formatting help text for option tables that exceed terminal width. The issue is exploitable locally by causing an application to print help, potentially crashing the application or rendering the he...

CVE-2026-70373

Koha: SQL Injection in reports/issues_stats.pl. The circulation statistics report builds the calculation query by concatenating user-controlled request parameters into SQL, with PeriodTypeSel, PeriodDaySel, PeriodMonthSel, and other identifiers interpolated without whitelist or parameter binding....

CVE-2026-70373 Koha - SQL Injection in reports/issues_stats.pl

Koha's reports/issuesstats.pl the circulation statistics report builds its calculation query in sub calculate by concatenating several user-controlled request parameters directly into the SQL string. The PeriodTypeSel, PeriodDaySel, and PeriodMonthSel parameters are interpolated raw into...

CVE-2026-70370

CVE-2026-70370 affects Koha and its reports/catalogue_stats.pl, where dynamic SQL is constructed in a subroutine by directly interpolating user-controlled Line and Column parameters into identifier slots (SELECT DISTINCTROW, GROUP BY, ORDER BY) without whitelist validation. If Line contains itemc...