CVE Vulnerability Catalog

A double-free vulnerability exists in the Samsung Exynos DPU driver (1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, 2600) due to improper pointer management during DMA buffer reallocation. This leads to kernel memory corruption and a potential use-after-free.

A heap overflow exists in the Exynos DRM HDR driver of Samsung Exynos processors (1280, 2200, 1380) due to improper buffer size validation. This leads to kernel memory corruption and a system crash.

A use-after-free exists in the Exynos DRM HDR driver of Samsung Exynos processors (1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, 2600) due to improper cleanup upon vmap failure. This leads to a kernel crash.

N-able Mail Assure through April 2026 contains a design-level authorization flaw allowing an authenticated SMTP user to send outbound email using MAIL FROM addresses belonging to other tenants. The server accepts arbitrary sender domains without enforcing domain-to-account binding, so messages pass SPF and DMARC validation. The vendor considers this intended functionality of its shared SMTP relay architecture.

A Cross-Site Scripting (XSS) vulnerability in the web backend of the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice question text field.

A lack of length check was discovered in the buffer queue driver of Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. This leads to a Denial of Service in the kernel.

In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownership of arbitrary files. This is a TOCTOU Race Condition caused by a combination of touch and chown.

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

In CVE-2026-15892, the mcumgr settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() allocate a key_name buffer (and a data buffer for read) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning MGMT_CB_ERROR_RC, the handler executes return ret_rc directly, bypassing the end: label and k_free(), leaking the heap allocation on every rejected request.

A flaw has been found in Rizwan17 inventory-management-system up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. This affects an unknown function of the file includes/process.php. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been published and may be used.

A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypass. It is possible to initiate the attack remotely. The exploit is now public and may be used.

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

A weakness has been identified in embedded-graphics up to 0.8.2 on 32-bit. Impacted is the function ImageRaw::new/bytes_per_row of the file src/image/image_raw.rs. This manipulation causes integer overflow. The attack is possible to be carried out remotely. Upgrading the affected component is recommended.

A security flaw has been discovered in wxiaoqi Spring-Cloud-Platform 1.0/2.2/3.0. This issue affects the function OnlineController.getOnlineInfo of the file aceModules/ace-admin/auth/controller/OnlineController.java. The manipulation results in missing authorization. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

A vulnerability was identified in wxiaoqi Spring-Cloud-Platform 3.0.1/3.1.0 affecting the function PermissionService.checkUserPermission in /rpc/service/PermissionService.java of the Permission Service component. The manipulation leads to missing authorization. Remote exploitation is possible and a public exploit is available.

A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1 affecting the function processFrameContinuousAndNonFin in Draft_6455.java of the Fragmentation Handler component. The manipulation can lead to resource allocation. The attack may be performed remotely and the exploit is publicly available.

The Quads Ads Manager for Google AdSense WordPress plugin before 3.0.5 does not verify payment completion with the configured payment gateway before marking an ad-selling order as paid, allowing users who can place an order to obtain a paid ad placement without payment.

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php. The vulnerability allows injection of malicious SQL code.

A security flaw has been discovered in kagisearch smallweb up to commit 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf affecting the function index in app/sw.py of the Query String Rendering component. Manipulation of the qs argument results in cross site scripting. The attack can be carried out remotely and the patch is named 00b68144e583f20a6b67e29cf01bc07f57979ffb.

A vulnerability was identified in evanchiu serverless-todo 1.0.3/2.0.0 affecting the function saveTodos in src/index.js of the API Todo Endpoint component. Manipulation of the event.body argument leads to resource consumption. The attack can be executed remotely and the exploit is publicly available.