2026

yshop-crm through 2.1.3 contains a missing authorization vulnerability in the CrmInvoiceController issueInvoice endpoint

yshop-crm through 2.1.3 fails to enforce authorization on the saveRedisSet and getRedisSet endpoints in CrmCustomerContr

yshop-crm through 2.1.3 fails to enforce authorization on the sendSms and sendMail endpoints in CrmCustomerController, a

WNC T-Mobile 5G Box IDU router contains an OS command injection vulnerability in the portal.cgi component's password cha

WNC T-Mobile 5G Box IDU router is vulnerable to OS command injection vulnerability. The vulnerability exists within the

WNC T-Mobile 5G Box IDU router contains a cross-site request forgery (CSRF) vulnerability in the portal.cgi component. T

WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cg

WNC T-Mobile 5G Box IDU router is vulnerable to a command injection. The vulnerability exists in the ping functionality

WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session

A vulnerability was identified in a2ui-project a2ui 0.8/0.9/1.0. Impacted is an unknown function of the file model-proce

A vulnerability was determined in a2ui-project a2ui 0.9/0.9.1. This issue affects the function updateComponents of the f

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skb_tx_error() the source skb in

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Don't hand out the flat CCS storage as usab

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don't spin_trylock() in NMI on UP P

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: ffs: fix mm lifetime handling io_data

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix Use-After-Free in AIO error

In the Linux kernel, the following vulnerability has been resolved: zram: fix slot lock bit position on big-endian 64-b

In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc() buffe

In the Linux kernel, the following vulnerability has been resolved: HID: sony: clean up device list on probe failure s

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Forcefully invalidate SNP VMSA if its bac

In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSD_

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during export s

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lr

In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix division by zero in get_estima

In the Linux kernel, the following vulnerability has been resolved: usb: image: mdc800: change kmalloc() to kzalloc()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in snd_usbmidi_us122

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: keep device alive while ALSA card exi

In the Linux kernel, the following vulnerability has been resolved: usb-storage: ene_ub6250: fix race between scan work

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: clear forceRM when issuing EndTransfer

In the Linux kernel, the following vulnerability has been resolved: usb: storage: realtek_cr: fix use-after-free on dis

In the Linux kernel, the following vulnerability has been resolved: usb: typec: hd3ss3220: track VBUS enable state per

In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic-typec: disable cc_debounce_dw

In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: cancel reset_work on stop p

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: displayport: Fix OOB altmode arra

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix null-pointer dereference in

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: fix null pointer deref

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi2: fix use-after-free in string

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: initialize work in f_midi_allo

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadget

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fix null pointer dereference in usb_pu

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read / stack overflow i

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_action_fram

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtw_restruct_wm

In the Linux kernel, the following vulnerability has been resolved: xhci: fix lost bounce buffers on TDs spanning sever

In the Linux kernel, the following vulnerability has been resolved: tracing: Have show_event_filters/triggers files tak

In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening op

In the Linux kernel, the following vulnerability has been resolved: spi: Fix DMA mapping ownership on partial map failu

In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Reserve a terminator byte for