259661 matches found
PT-2026-98490
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where unit conversions in the per binval computation are performed incorrectly. Specifically, the second parameter of the xfs buf inval log space...
PT-2026-98779
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix potential UAF/KASAN warning Currently, trace cachefiles coherency is being passed a pointer to a be64 lain over the coherency data in struct cachefiles xattr so that it can display the first 8 bytes. However, the...
PT-2026-98861
Name of the Vulnerable Software and Affected Versions Espruino version 2v29 Description A NULL pointer dereference occurs in the jslGetRawString function within src/jslex.c. When provided with specially crafted raw or binary string input, the lexer may pass a NULL iterator target to the...
PT-2026-98825
Name of the Vulnerable Software and Affected Versions APSL puput versions 1.2.1 through 2.2.0 Description A reflected cross-site scripting XSS issue exists in the EntryAbstract.save function. This allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code within the...
PT-2026-98823
Name of the Vulnerable Software and Affected Versions OpenStack Glance affected versions not specified Description A Server-Side Request Forgery SSRF issue exists in the Image API v2 of OpenStack Glance, specifically within the VMware datastore driver of glance store. When the show multiple...
PT-2026-99092
Name of the Vulnerable Software and Affected Versions X-SpringBoot versions prior to 6.0 Description Unauthenticated endpoints return login verification codes directly in HTTP responses without sending them to the account owners. An attacker can request these codes using a known mobile number or...
PT-2026-98822
Name of the Vulnerable Software and Affected Versions OpenStack Glance affected versions not specified Description A Server-Side Request Forgery SSRF issue exists in the Image API v2. When the show multiple locations configuration option is enabled in glance-api.conf, an authenticated attacker ca...
PT-2026-98878
Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 16.4.0 Description The application fails to perform numeric validation on dimension width, height, ratio, and filesize values provided via the Batch Manager filter URL in the 'admin/batch manager.php' endpoint. These...
PT-2026-98530
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the s390 crypto implementation where temporary buffers used with the PAES algorithm are not properly scrubbed. In the ctr paes do crypt function, a buffer used to...
PT-2026-98575
In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Ensure SRAM region size matches job It is possible for userspace to set the job SRAM size to 0, but then still have SRAM accesses in the command stream. When the job SRAM size is 0, setting the region base register...
PT-2026-98920
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.17 RabbitMQ versions 4.0.x prior to 4.0.23 RabbitMQ versions 4.1.x prior to 4.1.14 RabbitMQ versions 4.2.x prior to 4.2.9 RabbitMQ versions 4.3.x prior to 4.3.3 Description Native MQTT and MQTT over...
PT-2026-98460
Name of the Vulnerable Software and Affected Versions Regesta Smart HD-PLC - TLDPH16D2 version 11.02.06.00.02 Description A network attacker with registration access can perform Cross-Site Scripting XSS by injecting a specific payload via the cmdcookie parameter within the '/upgrade/index.html'...
PT-2026-98729
In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Fix potential double-free at error path The fix for caiaq driver's resource management to handle the errors tries to release the resources in a common destructor call, but as a sashiko review for another patch...
PT-2026-98466
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel panic occurs when CPUs are hotplug added during the execution of the perf stat command using the pai crypto/CRYPTO ALL/ event. The issue stems from a missing allocation of per-C...
PT-2026-98827
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the nf nat sip component fails to correctly adjust the offset when Network Address Translation NAT changes the packet length. Specifically,...
PT-2026-98835
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi wifi driver within the mei component where an incorrect argument is passed to the iwl mei write cyclic buf function. Specifically, the q head pointer is...
PT-2026-98901
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.14 RabbitMQ versions 4.0.x through 4.0.21 RabbitMQ versions 4.1.x through 4.1.10 RabbitMQ versions 4.2.x through 4.2.5 RabbitMQ versions 4.3.x through 4.3.0 Description An atom exhaustion issue exists when...
PT-2026-98908
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.21 RabbitMQ versions 4.1.x prior to 4.1.14 RabbitMQ versions 4.2.x prior to 4.2.7 RabbitMQ versions 4.3.x prior to 4.3.1 Description An atom exhaustion issue exists when the Management plugin is enabled. A...
PT-2026-98924
Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 4.3.5 Description An authenticated user with permissions to bind a queue to a topic exchange and publish to it can cause a denial of service. By using consecutive segments in a binding key, the user can force topic...
PT-2026-98496
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A reference count leak occurs in the SMB client when the cifs sb tlink function fails. This issue specifically affects configurations using the -o multiuser option. In these scenarios, t...
PT-2026-98568
In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication cpufreq policy alloc initializes policy-rwsem after kobject init and add has created the policy sysfs directory and its default attributes. A sysfs access can therefore...
PT-2026-98618
In the Linux kernel, the following vulnerability has been resolved: net/rds: fix tcp stream corruption with large pages rds message map pages assigns PAGE SIZE bytes to every scatterlist entry, even when total len ends in a partial page. The RDS congestion map is defined as 8192 bytes, so on...
PT-2026-99085
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description When the "Automatic account link on initial logon" setting is enabled, the system binds an incoming third-party Single Sign-On SSO identity to an existing local account by matching the reported email...
PT-2026-98818
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.8 and 6.18 LTS Description An issue exists in the drm/virtio component where the virtio-gpu driver fails to correctly use the DMA API for resource backing on Xen PV domains. In these domains, page addresses do not...
PT-2026-98912
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.17 RabbitMQ versions 4.0.x through 4.0.22 RabbitMQ versions 4.1.x through 4.1.13 RabbitMQ versions 4.2.x through 4.2.8 RabbitMQ versions 4.3.x through 4.3.2 Description Stored Cross-Site Scripting XSS exis...
PT-2026-98338
Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw exists in the example lite.sql file that allows a remote attacker to execute a manipulation leading to the use of default...
PT-2026-99014
rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...
PT-2026-98952
Name of the Vulnerable Software and Affected Versions Bludit CMS versions prior to 3.22.1 Description Authenticated users with the Author role can modify privileged page fields reserved for administrators by injecting reserved parameters into a content save request. This occurs because the...
PT-2026-98914
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description An issue exists in the OAuth2 implementation where token expiry checks are skipped if the Identity Provider IdP emits the exp claim as a JSON float. This...
PT-2026-98761
In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc named node up on empty publication list User-space applications can bind a large number of service addresses to one or more sockets. Each binding of a local-scope service address inserts one entry...
PT-2026-99074
Name of the Vulnerable Software and Affected Versions GLPI versions 9.4.0 through 10.0.25 GLPI versions 11.0.0 through 11.0.7 Description An attacker with READ permissions on logs can craft a URL for the history tab to inject controlled values into a database query. This leads to SQL injection, a...
PT-2026-98984
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to prevent another user from modifying their group settings due to improper validation o...
PT-2026-98845
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A tree connection leak exists in the smb2 tree connect function. The issue occurs when the ksmbd iov pin rsp function fails, resulting in the failure to disconnect the new tree connectio...
PT-2026-98811
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem regarding per-CPU map updates for array, hash, and cgroup storage maps when BPF F CPU or BPF F ALL CPUS are not used. The syst...
PT-2026-99068
Name of the Vulnerable Software and Affected Versions GLPI versions 11.0.0 through 11.0.7 Description The time-based one-time password TOTP verification endpoint does not limit failed submissions per user. An attacker with a user's primary authentication credentials can repeatedly submit TOTP...
PT-2026-98906
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 3.13.0 through 3.13.14 RabbitMQ versions 4.0.x prior to 4.0.20 RabbitMQ versions 4.1.x prior to 4.1.11 RabbitMQ versions 4.2.x prior to 4.2.6 Description When the stream plugin is enabled, the stream protocol stores the...
PT-2026-99001
NGINX Plus and NGINX Open Source have a vulnerability in the ngx http v3 module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner...
PT-2026-98590
In the Linux kernel, the following vulnerability has been resolved: ufs: validate cylinder group metadata before caching it ufs read cylinder copies the cylinder group index and the rotor positions straight from the on-disk group and caches them without any check: ucpi-c cgx = fs32 to cpusb, ucg-...
PT-2026-98915
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.0.0 through 4.0.22 RabbitMQ versions 4.1.0 through 4.1.13 RabbitMQ versions 4.2.0 through 4.2.8 RabbitMQ versions 4.3.0 through 4.3.2 Description The Shovel component fails to format state logged by the crash reporter, whic...
PT-2026-98910
Name of the Vulnerable Software and Affected Versions RabbitMQ versions 4.2.0 through 4.2.7 RabbitMQ versions 4.3.0 through 4.3.1 Description The get auth mechanism/1 function uses term to binary/1 on the strict auth mechanism or preferred auth mechanism atom when clearing cookies. This process...
PT-2026-98647
In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSE IOTLB GET FD and VDUSE VQ GET INFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GET F...
PT-2026-99100
Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.3-197 Description A path traversal issue exists in the admin template editor. Authenticated administrators with manage template access permission can use directory traversal sequences in the folder parameter to...
PT-2026-99120
Name of the Vulnerable Software and Affected Versions SCBE-AETHERMOORE versions 4.0.2 through 4.2.0 Description The AetherBrowser API server scripts/aetherbrowser/api server.py exposes the POST /api/ops/check-email endpoint without authentication. A remote attacker can call this endpoint to trigg...
PT-2026-99081
Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description The HTML sanitizer used in ticket articles and email views fails to correctly identify and block remote images when a shortened URL format is used that omits the double slash after the scheme. Because...
PT-2026-99091
Name of the Vulnerable Software and Affected Versions X-SpringBoot versions prior to 6.0 Description The software lacks object-level authorization in user management endpoints, which allows sub-administrators to modify or delete users without ownership verification. Attackers possessing...
PT-2026-98482
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the XFS file system where the xagb bitmap set call within the xrep agfl fill function can fail. Because the result of xagb bitmap walk is not checked, the system...
PT-2026-98534
In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory current check refer path reads old dentry-d parent without holding a reference nor a lock on it, and then dereferences it in collect domain accesses and in the audit...
PT-2026-98547
In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on unsupported feature error Route unsupported provisioned features through the common error path after vdpa alloc device so the allocated device and adapter pointer are released consistently...
PT-2026-99137
Name of the Vulnerable Software and Affected Versions Horilla versions prior to 1.6.0 Description An issue exists where the search parameter at the '/employee/employee-filter-view' endpoint is reflected via the jQuery .html method in the employee/templates/employee nav.html file without proper HT...
PT-2026-98464
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mptcp receive path where, under specific error conditions, the system can recursively call the mptcp data ready function via a state change, leading to an attempt ...