Bluetooth: SCO: hold sk properly in sco_conn_ready
CVE-2026-89774
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in sco_conn_ready
#advisory
共收录 23580 条相关情报。
← 返回所有主题mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches
CVE-2026-89186
Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTTP cache to store a paid response and ser
Insufficient validation of inputs supplied through affected VeloCloud Edge management and...
CVE-2026-86108
Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may al
The VeloCloud Edge software update workflow may accept update bundles without properly validating...
CVE-2026-86109
The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures becau
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function...
CVE-2026-92220
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an...
CVE-2026-73450
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with a
A vulnerability was determined in gedelumbung HospitalManagement up to...
CVE-2026-92221
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring...
CVE-2026-92299
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMe
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This...
CVE-2026-92247
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename o
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function...
CVE-2026-92217
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of the file
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the...
CVE-2026-92216
A vulnerability was found in a2ui-project a2ui up to 0.10.7. Affected by this issue is the function openUrl of the file
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the...
CVE-2026-92214
A flaw has been found in a2ui-project a2ui up to 0.10.7. Affected is an unknown function of the file samples/community/c
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability...
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any...
CVE-2026-92213
A vulnerability was detected in a2ui-project a2ui up to 0.10.6. This impacts the function z.any of the file renderers/we
EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in,...
CVE-2026-92298
EspoCRM through 10.0.8 uses PHP's rand() function to generate tokens for lead-capture opt-in, event invitation, and camp
synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload
CVE-2026-92247
A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename o
vllm-project vLLM MoRIIO Acknowledgement moriio_connector.py MoRIIOWrapper._handle_release_message resource consumption
CVE-2026-92220
A vulnerability was found in vllm-project vLLM 0.26.0/0.27.0. Affected is the function MoRIIOConnectorScheduler.request_
@jitsi/electron-sdk before 10.0.5 Unauthorized Screen Capture
CVE-2026-92299
@jitsi/electron-sdk before 10.0.5 exposes getDesktopSources() via contextBridge without requiring an active getDisplayMe
a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery
CVE-2026-92215
A vulnerability has been found in a2ui-project a2ui up to 0.10.7. Affected by this vulnerability is the function httpx.g
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated...
CVE-2026-73460
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject