CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.29)
A vulnerability was found in the Linux kernel's MPTCP (MultiPath TCP) subsystem related to the in-kernel path manager. The function setting the 'fullmesh' flag on endpoints was too permissive, allowing this flag to be set on implicit endpoints, which triggered a kernel warning and could lead to system instability.
A vulnerability was found in the Linux kernel's MPTCP implementation, related to improper handling of disconnect during TCP Fast Open. The bug can cause data stream corruption and trigger a warning in the __mptcp_clean_una function.
A soft lockup vulnerability was found in the Linux kernel during OOM (Out-Of-Memory) handling in cgroup. The issue occurs when a very large number of processes (e.g., 56,000) are in the OOM cgroup, causing traversal to take too long and blocking the system.
In the Linux kernel's rdma/cxgb4 driver, an integer overflow vulnerability was found on 32-bit systems. The user-controlled 'gl->tot_len' variable can cause wrapping in addition, leading to a potential security flaw.
A Server-Side Request Forgery (SSRF) vulnerability exists in the sort.php component of Emlog Pro v2.5.4. It allows an attacker to scan local and internal ports by supplying a crafted URL.
A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to inject malicious JavaScript or HTML via the postStrVar function in article_save.php.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 in the admin_files.php component. Attackers can exploit this flaw to execute arbitrary code on the server.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ip.php component. Attackers can exploit this flaw to execute arbitrary code on the server.
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_smtp.php component. Attackers can exploit this flaw to execute arbitrary code on the server.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_template.php component. Attackers can exploit this flaw to execute arbitrary code on the server.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 within the admin_ping.php component. Attackers can exploit this flaw to execute arbitrary code on the server.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 in the admin_notify.php component. An attacker can exploit this flaw to execute arbitrary code on the server.
A remote code execution (RCE) vulnerability was discovered in SeaCMS v13.3 via the isopen parameter in admin_weixin.php. An attacker can send a crafted HTTP request to execute arbitrary code on the server.
In YZNCMS v2.0.1, an arbitrary file upload vulnerability exists in the plugin installation feature. It allows an attacker to execute arbitrary code by uploading a crafted ZIP file.
In the Linux kernel, a vulnerability was found in the in6_dump_addrs() function for IPv6, where rcu_dereference() was used without holding the rcu_read_lock(), causing a lockdep warning and potential synchronization issues.
W jądrze systemu Linux zidentyfikowano podatność związaną z wyciekiem referencji podczas przełączania stref lub przestrzeni nazw sieciowych. Problem występuje, gdy nie wykonano czyszczenia ct pomiędzy tymi operacjami, co prowadzi do nieprawidłowego zarządzania wpisami ct.
W jądrze systemu Linux naprawiono podatność, która powodowała wyświetlanie komunikatu ostrzegawczego związane z błędnym dopasowaniem typów kodów błędów w funkcji qla2x00_async_adisc_sp_done. Wprowadzono dodatkowe tłumaczenie jednego typu kodu błędu na inny, aby rozwiązać ten problem.
W jądrze Linuxa zidentyfikowano podatność związana z wyciekiem pamięci w module drm/amd/display. Problem został rozwiązany poprzez dodanie zwolnienia zasobów w ścieżce obsługi błędów.