Tagged “cve.org”
CVEs tagged cve.org, newest first.
20168 CVEsRSS
CVE-2026-53952Critical· 9.8GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. A logic flaw in GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and below) allows unauthenticated attackers to …
CVE-2026-80960Medium· 5.5kernel: dm-pcache: validate on-media seg_num against the cache device size (CVE-2026-80960)
A flaw was found in the Linux kernel's dm-pcache component. A local attacker with CAP_SYS_ADMIN capabilities can exploit this vulnerability by supplying a specially crafted cache device. The seg_num value, which dictates the size of cache …
CVE-2026-80957Medium· 5.5kernel: dm-pcache: detect a cycle in the last-kset chain during replay (CVE-2026-80957)
A flaw was found in the `dm-pcache` component of the Linux kernel. A local attacker could exploit a vulnerability in the `cache_replay()` function, which does not properly handle a forged `last-kset` chain. By crafting a malicious chain th…
CVE-2026-80956Medium· 5.5kernel: dm-pcache: only hand out initialized cache segments (CVE-2026-80956)
A flaw was found in the Linux kernel's `dm-pcache` component. A crafted image can cause the `get_cache_segment()` function to return an uninitialized cache segment. This uninitialized segment, containing a null data pointer, is then used b…
CVE-2026-80946Medium· 5.5kernel: fuse: copy request headers via a stack buffer for io-uring (CVE-2026-80946)
A flaw was found in the Linux kernel's FUSE (Filesystem in Userspace) component. The `io-uring` transport attempts to copy request headers directly to or from user space without proper memory validation. A local attacker could exploit this…
CVE-2026-80940Medium· 5.5kernel: wifi: rtw88: pci: fix resource leak on failed NAPI setup (CVE-2026-80940)
A flaw was found in the Linux kernel's rtw88 PCI driver. During the probe process, if the NAPI (Networked Attached Peripheral Interface) setup fails, allocated PCI resources are not properly released. This resource leak could potentially l…
CVE-2026-80934Medium· 5.5kernel: wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames (CVE-2026-80934)
A flaw was found in the Linux kernel's mt76: mt7996 Wi-Fi driver. The driver incorrectly manages Direct Memory Access (DMA) mappings when processing AddBA request frames, causing a continuous leak of these mappings. Over time, this resourc…
CVE-2026-80927Medium· 5.5kernel: timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex() (CVE-2026-80927)
A flaw was found in the Linux kernel. A race condition in the timekeeping subsystem, specifically within the __do_adjtimex() function, can occur when the auxiliary clock is handled. This allows uninitialized stack data to be used in calcul…
CVE-2026-89455Medium· 5.5kernel: PCI: plda: Fix use-after-free of event IRQs during teardown (CVE-2026-89455)
A flaw was found in the Linux kernel's PCI PLDA driver. During the teardown of Interrupt Request (IRQ) domains, the system can attempt to access memory that has already been freed. This 'use-after-free' vulnerability occurs because the dom…
CVE-2026-89451Medium· 5.5kernel: iommu/sva: Set handle->dev before the SVA handle is visible (CVE-2026-89451)
A flaw was found in the Linux kernel's IOMMU (Input/Output Memory Management Unit) SVA (Shared Virtual Addressing) component. A race condition during the attachment of an SVA handle can lead to a situation where a device pointer is not pro…
CVE-2026-89449Medium· 5.5kernel: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add (CVE-2026-89449)
A flaw was found in the Linux kernel's Input-Output Memory Management Unit (IOMMU) subsystem. When a device addition fails during the `iommu_mock_device_add()` operation, the allocated device IOMMU structure is not properly deallocated. Th…
CVE-2026-89446Medium· 5.5kernel: iommufd: Release current IOAS on xa_store() failure (CVE-2026-89446)
A flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space (IOAS) object and the storage operation fails, the IOAS object's associated resources, such as its write lock and obj…
CVE-2026-89439Medium· 5.5kernel: platform/x86: ISST: Add a NULL check for sst_inst[] (CVE-2026-89439)
A flaw was found in the Linux kernel's Intel Speed Select Technology (ISST) driver. A missing NULL check for `isst_common.sst_inst[]` during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vul…
CVE-2026-81018Medium· 5.5kernel: platform/x86: think-lmi: Free system certificate signatures (CVE-2026-81018)
A flaw was found in the Linux kernel's `think-lmi` driver. When the driver is removed, the system authentication object fails to free stored certificate signatures, leading to a memory leak. This can result in system instability or denial …
CVE-2026-80999Medium· 5.5kernel: net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO (CVE-2026-80999)
A flaw was found in the Linux kernel's Realtek Digital Subscriber Line (DSA) driver. The driver incorrectly uses gpiod_set_value() instead of gpiod_set_value_cansleep() for reset GPIO operations. This can lead to system warnings when the r…
CVE-2026-80996Medium· 5.5kernel: net: l2tp: do not propagate multicast notification errors (CVE-2026-80996)
A flaw was found in the Linux kernel's L2TP (Layer 2 Tunneling Protocol) networking component. Specifically, the netlink handlers responsible for creating and modifying L2TP tunnels and sessions may fail to propagate multicast notification…
CVE-2026-80993Medium· 5.5kernel: net: phylink: correctly validate returned PCS in phylink_inband_caps (CVE-2026-80993)
A flaw was found in the Linux kernel's `net: phylink` component. The `phylink_inband_caps()` function does not correctly validate the return value from `mac_select_pcs`, which can return an error pointer instead of a valid Physical Coding …
CVE-2026-80974Medium· 5.5kernel: mfd: sm501: Fix potential memory leaks during remove (CVE-2026-80974)
A flaw was found in the `mfd: sm501` component of the Linux kernel. This vulnerability arises from a failure to properly free allocated memory for `struct sm501_devdata` during the device removal process. A local attacker could potentially…
CVE-2026-62133Medium· 5.4WordPress RTMKit plugin <= 2.1.5 - Cross Site Request Forgery (CSRF) vulnerability
Subscriber Cross Site Request Forgery (CSRF) in RTMKit <= 2.1.5 versions.
CVE-2026-89484Medium· 5.5kernel: lockd: fix NULL dereference on lockowner allocation failure (CVE-2026-89484)
A flaw was found in the Linux kernel's `lockd` component. This vulnerability occurs when the Network Lock Manager (NLM) client attempts to initialize file lock operations without successfully allocating a lockowner. This can lead to a NULL…
CVE-2026-89468Medium· 5.5kernel: power: supply: lp8788-charger: fix use-after-free on remove (CVE-2026-89468)
A flaw was found in the Linux kernel's lp8788-charger component. During the removal of the lp8788-charger, a race condition can occur where work can be queued and executed after the associated memory has been freed. This use-after-free vul…
CVE-2026-89467Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notify() queues enable_work when the PMIC GLINK service comes up, and the worker recovers battmgr thro…
In the Linux kernel, the following vulnerability has been resolved: power: supply: qcom_battmgr: fix use-after-free qcom_battmgr_pdr_notify() queues enable_work when the PMIC GLINK service comes up, and the worker recovers battmgr thro…
CVE-2026-89462Medium· 5.5kernel: power: supply: max17040: propagate register read errors (CVE-2026-89462)
A flaw was found in the Linux kernel's power supply subsystem, specifically within the max17040 driver. This vulnerability occurs when the `max17040_get_vcell()` and `max17040_get_soc()` functions fail to properly handle errors returned by…
CVE-2026-81825High· 7.2Simple Ajax Chat <= 20260811 - Unauthenticated Stored Cross-Site Scripting
The Simple Ajax Chat – Add a Fast, Secure Chat Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Chat Message in all versions up to, and including, <= 20260811 due to insufficient input sanitization and output esc…
CVE-2026-89252Medium· 6.5PoCAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to verify ownership in addLiveLink.php when updating LiveLinks, allowing authenticated users to modify other users' links. A canStream user can overwrite another user's…
CVE-2026-89256High· 8.7PoCAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the Bookmark plugin where chapter names are not encoded before being concatenated into public watch-page HTML. A video…
CVE-2026-72709Critical· 9.8PoCSPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to invoke privileged actions by supplying only a valid CSRF nonce without any serve…
SPIP before version 4.4.18 contains a missing authorization vulnerability in sensitive actions under ecrire/action/ that allows unauthenticated attackers to invoke privileged actions by supplying only a valid CSRF nonce without any serve…
CVE-2026-89090Medium· 5.9An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response …
An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response …
CVE-2026-89010Critical· 9.8PoCWAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to …
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to …
CVE-2026-86781Medium· 5.3The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowin…
The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowin…