396022 matches found
PT-2026-94966
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in AXIDMA and MCDMA interrupt handlers. The issue occurs when multiple descriptors are queued and active, and an interrupt fires after completing only some of the...
PT-2026-94359
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.4 Description The software renders document titles as HTML in the backlink dock tree without escaping markup characters. This allows attackers to set malicious titles via the rename API or crafted notebooks to...
PT-2026-94625
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the md/md-llbitmap component. The llbitmap create function publishes mddev-bitmap before reading the bitmap superblock. If the llbitmap read sb...
PT-2026-94385
Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.1.0 through 2.16.0 AsyncHttpClient versions 3.0.1 through 3.0.11 Description Requests using an authenticated SOCKS proxy can expose proxy credentials to the origin server. This occurs because NettyRequestFactory and...
PT-2026-94477
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio balloon driver where the absence of a specific .shutdown handler allows the generic virtio bus shutdown process to break and reset the device while...
PT-2026-94619
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the arm mpam module when a user unbinds a Memory System Component MSC after an error interrupt has triggered the mpam disable function. This happens...
PT-2026-94279
Name of the Vulnerable Software and Affected Versions BMCtest affected versions not specified Description In BMCtest, Ironic is started without authentication and TLS for the duration of the test. Exploiting this issue requires winning a race condition with bmctest, which limits the attack window...
PT-2026-95182
Name of the Vulnerable Software and Affected Versions Azure Portal affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allows an...
PT-2026-94830
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ACPI processor component where the IOAPIC hotplug lookup fails to properly validate bounds when parsing MADT Multiple APIC Description Table and MAT records. The...
PT-2026-94600
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth MGMT component when an HCI command is cancelled. The mgmt hci cmd sync function queues pending commands with a NULL destroy callback, meaning they a...
PT-2026-94356
Name of the Vulnerable Software and Affected Versions InternLM LMDeploy versions prior to 0.17.1 Description In DistServe prefill/decode disaggregation mode, the proxy uses user-facing session IDs instead of internal scheduler keys, which prevents the release of scheduler sessions. Unauthenticate...
PT-2026-94701
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the mt7915 wireless driver. When mt7915 register ext phy succeeds but a subsequent failure occurs in mt7915 init debugfs or mt7915 coredump register, the...
PT-2026-94194
Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 and Motion Control Setting affected versions not specified Description An incorrect implementation of the authentication algorithm allows a local attacker to bypass block password authentication. By executing the...
PT-2026-94940
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the check ptr to btf access function allows btf struct access callbacks to validate write operations before the default...
PT-2026-94419
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sch teql scheduler where the teql master xmit function sets the skb-dev variable to a slave device before calling ndo start xmit, but fails to restore it if the...
PT-2026-94723
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mt76 wifi driver where the mt76 tx queue skb function overrides the wireless client identifier wcid passed by the driver. This causes the non aql packets counter t...
PT-2026-95113
Name of the Vulnerable Software and Affected Versions Caddy versions prior to 2.11.4 Description Three configuration-dependent weaknesses affect the handler and placeholder layer. First, in the Rewrite.Rewrite function within modules/caddyhttp/rewrite/rewrite.go, a double-expansion issue occurs...
PT-2026-99685
This update for memcached fixes the following issue: - heap buffer overflows in default-config LRU-crawler metadump and proxy backend-response length truncation bsc1270716...
PT-2026-94989
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference leak exists in the rockchip dp drm encoder enable function. The issue occurs because the of get child by name function does not call of node put symmetrically, leading to a...
PT-2026-95115
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description A use after free issue exists within the Extensions component. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by utilizing a specially crafted Chrome...
PT-2026-95121
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description Incorrect authorization in ORB Opaque Response Blocking, a mechanism designed to prevent cross-origin information leaks, allows a remote attacker to bypass site isolation by using a...
PT-2026-95117
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.52 Description Incorrect reference resolution in the Tracing component on Windows allows a local attacker to potentially execute arbitrary code outside the sandbox through a local program...
PT-2026-94224
Name of the Vulnerable Software and Affected Versions Eclipse Ankaios versions 0.6.0 through 1.0.3 Description In the agent control-interface authorizer, the LogRule::matches function stops processing at the first wildcard pattern encountered within a single rule instead of evaluating subsequent...
PT-2026-94378
Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
PT-2026-94993
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the memory cgroup memcg management where LRU size accounting is copied instead of moved during reparenting. When a memory cgroup is offlined, the lruvec reparent lru...
PT-2026-94735
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the swiotlb component where swiotlb alloc tlb may allocate from the DMA atomic pool when a decrypted pool is required from an atomic context. When CONFIG DMA DIRECT...
PT-2026-94661
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An invalid storage access issue exists when replacing a cgroup BPF program in multi-attach mode. If the replacement process fails midway—specifically during bpf trampoline link cgroup sh...
PT-2026-94185
Name of the Vulnerable Software and Affected Versions Yo WordPress plugin versions 1.1 through 1.3.1 Description An issue exists where the software fails to sanitize or parameterize the username request parameter before incorporating it into a SQL query. Because the parameter is read before...
PT-2026-94164
Name of the Vulnerable Software and Affected Versions Pressengine WordPress plugin versions prior to 1.1 Description The login handler fails to prevent the issuance of a session when authentication fails. This allows unauthenticated attackers to bypass authentication and log in as any user,...
PT-2026-95110
Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A heap-based buffer overflow occurs in the TLS transport layer of the MongoDB C Driver when using the Windows platform TLS backend. A remote endpoint can cause the driver to write...
PT-2026-99687
Root has patched AIKIDO-2026-10760 in the next package for Root:npm. Multiple fixed versions available...
PT-2026-94624
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the md/md-llbitmap component where the llbitmap destroy function deletes the pending timer before flushing the md llbitmap io wq workqueue. Because daemon work may sti...
PT-2026-95116
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.52 Description A use after free issue in Dawn allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after...
PT-2026-94433
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the rvu dbg nix tm tree display function. This occurs when the function accesses pfvf-sq ctx without verifying if the SQ context has been allocated...
PT-2026-94982
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the CXL mailbox implementation where the out.size parameter is not bounded. When CXL MEM SEND COMMAND is used, the cxl mbox cmd ctor function calls kvzallocout.size...
PT-2026-95071
Name of the Vulnerable Software and Affected Versions Dromara mayfly-go versions prior to 1.11.6 Description A missing authorization issue exists within the AI Assistant component, specifically in the server/internal/ai/api/ai.go file. This flaw allows for remote exploitation via a whitelist bypa...
PT-2026-94893
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the CXL mailbox implementation where a device returning a count of 0 while the CXL POISON FLAG MORE flag remains set causes an infinite do/while loop. Because the nr...
PT-2026-95068
Summary The decompression-bomb bound added in 2.0.1 commit 1c1003c sums ZipArchive::statIndex$i'size' and rejects an archive whose declared uncompressed total exceeds system.gpm.archive.max uncompressed size default 1 GiB before extracting ZipArchiver.php:77-86; same logic in GPMInstaller::unZip ...
PT-2026-94407
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the stmmac network driver where the conversion of the RX path to zero-copy failed to maintain the NET IP ALIGN in the RX DMA offset. On architectures where NET IP ALIG...
PT-2026-94363
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
PT-2026-95481
CVE-2026-85789 - Rejected reason: This CVE ID has been rejected or CVE ID :CVE-2026-85789 Published : Sept. 16, 2026, 11:16 p.m. | 2 hours, 58 minutes ago Description :Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link for...
PT-2026-94859
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A stack over-read exists in the debug output helpers of the host1x GPU driver. The functions host1x debug output and host1x debug cont utilize vsnprintf, which returns the total length t...
PT-2026-94260
Contributor Cross Site Scripting XSS in JetTabs = 2.3.3.1 versions...
PT-2026-99522
TuxCare rebuilt drupal/i18n to address 1 CVE. Fixed in 7.1.35-p1+tuxcare...
PT-2026-94395
Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.0.0 through 2.16.0 AsyncHttpClient versions 3.0.0 through 3.0.11 Description When using an HTTP proxy to reach an HTTPS origin, the library may expose preemptive origin credentials. This occurs because...
PT-2026-94274
Editor SQL Injection in SKT Addons for Elementor = 4.0 versions...
PT-2026-94384
Name of the Vulnerable Software and Affected Versions Steeltoe versions prior to 4.3.0 Description Steeltoe.Security.Authorization.Certificate deployments using AddOrgAndSpacePolicies and UseCertificateAuthorization trust the public certificate provided in the X-Client-Cert request header without...
PT-2026-94636
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rcar-gen2 Renesas PHY driver where a double reference release occurs during PHY creation failure. The for each child of node scoped function automatically releases...
PT-2026-95086
Name of the Vulnerable Software and Affected Versions Datadog PHP Tracer versions prior to 1.19.2 Description The ddtrace deserialize baggage function in ext/distributed tracing headers.c fails to enforce the DD TRACE BAGGAGE MAX ITEMS or DD TRACE BAGGAGE MAX BYTES limits when parsing incoming W3...