CVE-2026-8285

Technical details about CVE-2026-8285 are not publicly available in the provided documents. Affected: FlexCity (Universal Software Inc.) 5.536.0–11052026. Monitor for updates.

EUVD-2026-46187

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 through 11052026...

CVE-2026-8285 OTP Bypass in Universal Sotware's FlexCity

Improper restriction of excessive authentication attempts vulnerability in Universal Software Inc. FlexCity allows Excessive Allocation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

CVE-2026-8284 Open Redirect in Universal Sotware's FlexCity

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

EUVD-2026-46186

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 through 11052026...

CVE-2026-8284 Open Redirect in Universal Sotware's FlexCity

URL redirection to untrusted site 'open redirect' vulnerability in Universal Software Inc. FlexCity allows Input Data Manipulation. This issue affects FlexCity: from 5.536.0 before 5.542.0...

CVE-2026-8284

CVE-2026-8284: Open redirect vulnerability in Universal Software Inc. FlexCity (versions 5.536.0–11052026) allowing URL redirection to untrusted sites via input data manipulation. Affected product: FlexCity. Root cause details are not provided in the supplied documents. Impact as per CVSSv3.1: Co...

CVE-2026-63904

A flaw was found in the Linux kernel's USB Test and Measurement Class USBTMC driver. This vulnerability occurs because the driver does not properly verify the size of incoming notification messages, specifically failing to ensure that required two-byte headers are present. An attacker could explo...

CVE-2026-63896

A flaw was found in the Linux kernel's USB gadget composite driver. A remote attacker, acting as a malicious USB host, could send a specially crafted GETURL request. This request, with a small wLength value, triggers an integer underflow when calculating the buffer length for a memory copy...

CVE-2026-63928

A flaw was found in the Linux kernel's USB serial omninet driver. A malicious Universal Serial Bus USB device could exploit this by reporting a smaller maximum packet size than anticipated. This action would cause the system to allocate undersized data buffers, leading to memory corruption. Such...

CVE-2026-53369

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could craft a malicious UDF image with an oversized Cyclic Redundancy Check CRC length. This could allow the attacker to bypass the integrity validation of UDF descriptors, leading to the acceptance of...

[SECURITY] Fedora 44 Update: gpsd-3.27.5-5.fc44

gpsd is a service daemon that mediates access to a GPS sensor connected to the host computer by serial or USB interface, making its data on the location/course/velocity of the sensor available to be queried on TCP port 2947 of the host computer. With gpsd, multiple GPS client applications such as...

PT-2026-62728

Name of the Vulnerable Software and Affected Versions Oracle Universal Work Queue versions 12.2.3 through 12.2.15 Description An issue in the UWQ Server component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires human interaction from...

CVE-2026-25039

Summary (CVE-2026-25039): Parsec, a cloud-based file sharing app, does not sanitize the workspace name when creating a mountpoint in Windows, allowing a UNC path to be used as the workspace name. The root cause is that UNC paths may contain backslashes, and if the UNC target is invalid or unavail...

Linux Distros Unpatched Vulnerability : CVE-2026-63957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: serial: safeserial: fix memory corruption with small endpoint Make sure that the bulk-out buffer size is at least eight bytes to avoid user-controlled slab...

Linux Distros Unpatched Vulnerability : CVE-2026-63904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: usbtmc: check URB actuallength for interrupt-IN notifications USBTMC devices can use an optional interrupt endpoint for notification messages. These...

Linux Distros Unpatched Vulnerability : CVE-2026-63959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: tcpm/tcpcimaxim: validate header NDO against RXBYTECNT A broken/malicious port can transmit a CRC-valid frame whose header advertises up to seven da...

Linux Distros Unpatched Vulnerability : CVE-2026-53369

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - udf: reject descriptors with oversized CRC length udfreadtagged skips CRC verification when descCRCLength + sizeofstruct tag exceeds the block size. A crafted U...

Linux Distros Unpatched Vulnerability : CVE-2026-63821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw88: usb: fix memory leaks on USB write failures When rtwusbwriteport fails to submit a USB Request Block URB e.g., due to device disconnect or ENOMEM,...

SUSE CVE-2026-53369

In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udfreadtagged skips CRC verification when descCRCLength + sizeofstruct tag exceeds the block size. A crafted UDF image can set descCRCLength to an oversized value to bypass CRC...