CVE-2026-111581

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

EUVD-2026-102935

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

CVE-2026-111581

A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label...

PT-2026-115633

Name of the Vulnerable Software and Affected Versions libblockdev affected versions not specified Description An issue exists where the bd fs ntfs set label and bd fs vfat set label functions pass user-supplied label values to the ntfslabel and fatlabel utilities without proper input validation o...

Linux Distros Unpatched Vulnerability : CVE-2026-111581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libblockdev. The bdfsntfssetlabel and bdfsvfatsetlabel functions pass caller-supplied label values as bare positional arguments to the...

CVE-2026-105848

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST proxy can perform unintended Stripe operations. This issue is...

CVE-2026-105848 Payload: Insufficient Access Control in Stripe REST Proxy

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST proxy can perform unintended Stripe operations. This issue is...

PT-2026-106780

Name of the Vulnerable Software and Affected Versions @payloadcms/plugin-stripe versions prior to 3.90.0 @payloadcms/plugin-stripe versions prior to 4.0.0-canary.34 Description An authenticated user can perform unintended Stripe operations by accessing the enabled optional Stripe REST proxy. This...

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764

A cross-site request forgery (CSRF) vulnerability affects multiple Contec products. A user who views a specially crafted page while logged in may have unintended operations performed on the target system. The CVSS 3.0 base score is 4.3 (MEDIUM) with a network attack vector, low complexity, no req...

EUVD-2026-77218

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-82764: Cross-Site Request Forgery (CSRF)

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

PT-2026-91068

Cross-site request forgery vulnerability exists in multiple Contec products. If a user views a specially crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-71368

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-71368

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-71368

F-RevoCRM contains a stored/reflected XSS flaw; an authenticated user viewing a crafted page may have unintended actions performed on their session. CVSS 3.0 scores 6.1 MEDIUM (network, no privileges, active user interaction). No exploitation or fix details are provided in the documents. Monitor ...

CVE-2026-71368: Improper Neutralization of Input During Web Page Generation

F-RevoCRM contains a cross-site scripting vulnerability. If a user views a crafted page while logged in to the affected product, unintended operations may be performed...

CVE-2026-58315: Cross-Site Request Forgery (CSRF)

Cross-site request forgery vulnerability exists in SEIKO EPSON Web Config. If a user views a malicious page while logged into Web Config, unintended operations may be performed...