415910 matches found
CVE-2026-98168
The Linux kernel contains a vulnerability in the SMB client component within the cifs_query_reparse_point() function. The root cause is an insufficient bounds check where the code verifies that the start pointer is within the response but fails to ensure at least 8 bytes remain for the reparse_da...
CVE-2026-98167
The Linux kernel SMB client contains a vulnerability in receive_encrypted_standard() where server->total_read incorrectly maintains the full decrypted frame size while processing sub-PDUs of a compound encrypted frame . This oversight causes cifs_handle_standard() to pass an incorrect size to ...
CVE-2026-98165
The Linux kernel 's drm/amdgpu driver contains a vulnerability related to the BAR0 fallback read path. This path was originally implemented as a workaround for SR-IOV VFs where the VRAM aperture is unavailable during early initialization. The fix involves restricting this workaround specifically ...
CVE-2026-98166
A flaw in the Linux kernel 's DRM TTM (Direct Rendering Manager Translation Table Manager) subsystem allows swapped-out buffer resources to remain in their bulk_move range due to an improper status check. This oversight causes range endpoints to point at freed memory when resources are later free...
CVE-2026-104399
The StylemixThemes Motors WordPress plugin (versions up to and including 1.4.124 ) is vulnerable to a Sensitive Data Exposure flaw (CWE-201). This vulnerability allows an attacker to Retrieve Embedded Sensitive Data from the application. No specific exploitation details or remediation steps are p...
CVE-2026-94206
The cloak_ecto and cloak libraries (by danielberkompas) are vulnerable to a Use of Password Hash With Insufficient Computational Effort (CWE-916) flaw. Specifically, the Cloak.Ecto.PBKDF2 (formerly Cloak.Fields.PBKDF2) component incorrectly passes the :size configuration value into the iteration-...
CVE-2026-95105
The cloak library, from version 0.1.0-pre onward, is vulnerable to a chosen-plaintext forgery due to a lack of ciphertext authentication. Specifically, the Cloak.Ciphers.AES.CTR and Cloak.Ciphers.Deprecated.AES.CTR components use AES-256 in CTR mode but do not include a MAC (Message Authenticatio...
CVE-2026-105317
The WordPress Paid Member Subscriptions plugin versions
CVE-2026-105071
The SiteVault – Backup, Restore, Migration & Cloning plugin for WordPress (versions
CVE-2026-105070
The WordPress Salon booking system plugin versions
CVE-2026-105061
The WP Mailster plugin for WordPress (versions
CVE-2026-105059
The Delete All Comments of wordpress plugin for WordPress versions
CVE-2026-105058
The WordPress WP User Profiles plugin versions
CVE-2026-105057
The Zero Spam WordPress plugin (versions
CVE-2026-104814
The Form Block WordPress plugin in versions
CVE-2026-104757
The WordPress Import and export users and customers plugin (versions
CVE-2026-104672
The GiveWP plugin for WordPress, affecting versions
CVE-2026-104747
The Haaken WordPress theme versions