Emlog Blind SQL Injection via Authentication Cookie
CVE-2026-53756
Emlog is an open source website building system. Prior to version 2.6.16, Emlog CMS Pro contains a blind SQL injection i
#advisory
共收录 23717 条相关情报。
← 返回所有主题SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation links
CVE-2026-61608
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities have no expiry time
SolidInvoice: PHP unserialize() called on client-controlled data in DataGrid LiveComponent context prop
CVE-2026-61686
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveComponent deserializes a `
ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
CVE-2026-82538
ILIAS before versions 9.22, 10.10, and 11.3 contains a SQL injection vulnerability in the repository trash table where t
CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes
CVE-2026-75914
### Maintainer resolution The CodeWhale maintainers validated this report. The affected package ranges are recorded in
SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor
## Summary `validateCertificatePath()` does not verify that an attestation's certificate chain actually terminates at a
SurrealDB allows bypass of deny-net flags via DNS resolution
CVE-2025-71390
SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https:/
Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)
CVE-2026-50553
Note Mark is an open-source note-taking application. Prior to version 0.19.5, Note Mark validates book and note slug val
selinux: require every boolean value to be defined
CVE-2026-80913
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined
selinux: reject an unclaimed class value in security_get_classes()
CVE-2026-80912
In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securit
ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
CVE-2026-80911
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: sof-audio: Fix error path in sof_widget_
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
CVE-2026-80910
In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol ac
drm/amdgpu: Reject UVD message with invalid number of h265 refs
CVE-2026-80909
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with invalid number
drm/amdgpu: Reject UVD message with dimensions above 4096
CVE-2026-80908
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Reject UVD message with dimensions abov
drm/amdgpu: Fix UVD dpb min size calculation for H264
CVE-2026-80907
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix UVD dpb min size calculation for H2
net: packet: fix wrong transport_header when sending VLAN-tagged frame
CVE-2026-80906
In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transport_header when sendin
net: tap: fix wrong transport_header when sending VLAN-tagged frame
CVE-2026-80905
In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transport_header when sending V
net/tls: Fail tls_sw_splice_read() after a failed async decrypt
CVE-2026-80904
In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tls_sw_splice_read() after a failed a
drm/xe/oa: Fix sync entry leak on OA config emit failure
CVE-2026-80903
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit fa
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA
CVE-2026-80902
In the Linux kernel, the following vulnerability has been resolved: dmaengine: sun6i-dma: Fix reclaim descriptors while