Skip to content
Signals
NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-72530 · TrueConf Server Code Injection Vulnerability · Added 2026-08-20 · Due 2026-09-03CISA KEV · CVE-2026-72529 · TrueConf Server Missing Authentication for Critical Function Vulnerability · Added 2026-08-20 · Due 2026-08-23NVD · CVE-2026-64604 · In the Linux kernel, the following vulnerability has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode When updating CR8NVD · CVE-2026-64603 · In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify handler against recursion Since commit e2ffcda1NVD · CVE-2026-64602 · In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung ChuNVD · CVE-2026-64601 · In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eachCISA KEV · CVE-2026-72530 · TrueConf Server Code Injection Vulnerability · Added 2026-08-20 · Due 2026-09-03CISA KEV · CVE-2026-72529 · TrueConf Server Missing Authentication for Critical Function Vulnerability · Added 2026-08-20 · Due 2026-08-23
Dragons Community

Vendors · timgreen

timgreen

· 2 Critical

Total CVEs

8

Critical

2

Products

2

Search All CVEs →

8

Products (2)

dingfanzu cms6 CVEspython book2 CVEs

Recent Vulnerabilities

View all 8 →
CVE-2024-50650HIGH 7.5

python_book V1.0 is vulnerable to Incorrect Access Control, which allows attackers to obtain sensitive information of users with different IDs by modifying the ID parameter.

CVE-2024-50649CRITICAL 9.8

The user avatar upload function in python_book V1.0 has an arbitrary file upload vulnerability.

CVE-2024-50966CRITICAL 9.3

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=addAdmin.

CVE-2024-48291MEDIUM 6.3

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17

CVE-2024-48191MEDIUM 6.3

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17

CVE-2024-48758MEDIUM 6.1

dingfanzu CMS V1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the addPro parameter of the component doAdminAction.php which allows a remote attacker to execute arbitrary code

CVE-2024-46600MEDIUM 4.7

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/doAdminAction.php?act=delCate&id=31

CVE-2024-46485MEDIUM 6.3

dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=addCate