Tagged “cve.org”
CVEs tagged cve.org, newest first.
50006 CVEsRSS
CVE-2026-110311Medium· 4.3PoCGitea draft release creation disclosing attachment metadata
Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which matched every attachment that was not linked to a release. A user who could create a draft release in a repository ther…
CVE-2026-97859Medium· 6.5PoCGitea API disclosure of private user social graph, keys and stars
Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the `individualPermsChecker` middleware that enforces the visibility of…
CVE-2026-105964Medium· 6.5Gitea Actions artifact v4 API unbounded request body
The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can run a workflow and obtains the runner token of that run could send an oversized request to the artifact service a…
CVE-2024-4457Critical· 9.1Remote Code Execution via JDBC User Store Configuration in Multiple WSO2 Products Allows Arbitrary Code Execution
The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected…
CVE-2026-111992Medium· 6.3PoCitsmeravitejak Online-Examination-System Exam exam.php startExam sql injection
A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file exam.php of the component Exam Module. The manipulation …
CVE-2026-111993Low· 3.3PoCSoarkey StudentManagement AdminDao.java UserDao.login cleartext storage
A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes clear…
CVE-2026-98656Noneiio: trigger: cancel reenable_work before freeing trigger
In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() into trig->reenable_work on the system workqueue, and th…
CVE-2026-98655Noneperf: Require kernel access for text poke events
In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with exclude_kernel=1 can be opened without kernel perf access. However, exclude_kernel does not suppress …
CVE-2026-98659Noneiio: pressure: rohm-bm1390: Return error when read fails
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error value, and unconditionally returns 0. Return cached 'ret' -…
CVE-2026-98658Noneiio: proximity: aw96103: validate firmware data length
In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary header and then uses it to walk six-byte register/value entri…
CVE-2026-98657Noneiio: proximity: pulsedlight: fix iio_device left registered on PM setup failure
In the Linux kernel, the following vulnerability has been resolved: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure pm_runtime_set_active() failing in probe() jumps to error_unreg_buffer, which only call…
CVE-2026-98662Medium· 4.7iio: light: gp2ap020a00f: drain irq_work after free_irq
In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irq_work after free_irq The threaded IRQ handler queues data->work through irq_work_queue() so the trigger is polled from a per-CPU con…
CVE-2026-98661Noneiio: light: rohm-bu27034: Fix infinite delay on error
In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will use error code to compute the sleep time. Fix this by usin…
CVE-2026-98660Noneiio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables store each frequency as an integer part and a fractional par…
CVE-2026-98666Noneiio: gyro: adis16136: fix unprotected debugfs reads
In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial_number file operations are open coded and never call debugfs_file_get(), which debugfs_create_file_unsaf…
CVE-2026-98665Noneiio: health: max30102: fix NULL dereference in interrupt handler
In the Linux kernel, the following vulnerability has been resolved: iio: health: max30102: fix NULL dereference in interrupt handler The interrupt is requested in max30102_probe() and stays enabled for the lifetime of the device, but i…
CVE-2026-98664Noneiio: imu: adis16400: fix unprotected debugfs reads
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400_serial_number_fops is open coded and never calls debugfs_file_get(), so debugfs_remove_recursive() does no…
CVE-2026-98663Noneiio: imu: adis16480: fix unprotected debugfs reads
In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are open coded and never call debugfs_file_get(), which debu…
CVE-2026-98669Noneiio: buffer: serialize buffer teardown with mode claims
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer teardown with mode claims Buffer-mode claims hold mlock to guarantee that the device remains in buffer mode until the claim is released. …
CVE-2026-98668Noneiio: buffer: Ensure bounce buffer used for unaligned case is zeroed.
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. iio_push_to_buffers_with_ts_unaligned() leaks uninitialized heap memory to userspace if the data p…
CVE-2026-98667Noneiio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data
In the Linux kernel, the following vulnerability has been resolved: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data The clk_init_data structure contains several mutually-exclusive members for different metho…
CVE-2026-98673Noneiio: adc: pac1934: check ACPI label duplication
In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort before acce…
CVE-2026-98672Noneiio: adc: stm32-adc: fix possible division by zero in processed channel
In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing *val can lead to a division by z…
CVE-2026-98671Noneiio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure
In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If devm_thermal_of_zone_register() fails, probe returns without unregistering the IIO map arra…
CVE-2026-98670Noneiio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind
In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler queues zynq_unmask_work via schedule_delayed_work(); that…
CVE-2026-98677Noneiio: adc: ad_sigma_delta: fix use-after-free on unbind
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix use-after-free on unbind ad_sd_buffer_postenable() allocates sigma_delta->samples_buf with devm_krealloc() at runtime, so its devres entr…
CVE-2026-98675Noneiio: adc: ade9000: handle Phase C dip events in IRQ1 handler
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000_ST1_CROSSING_DEPTH is the exclusive upper bound for scanning the STATUS1 event bits, so a value of…
CVE-2026-98674Noneiio: adc: adi-axi-adc: Initialize state mutex
In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st->lock, but probe does not initialize it. Initialize the …
CVE-2026-98679Noneiio: accel: kxcjk-1013: reject duplicate event disable
In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the event enable attribute. kxcjk1013_write_event_config() alre…
CVE-2026-98678Noneiio: adc: ad4030: fix invalid oversampling_ratio validation
In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversampling_ratio validation In ad4030_set_avg_frame_len(), the logarithm is calculated before input validation. Passing zero or negativ…