25294 matches found
SUSE CVE-2026-61898
The Ubuntu-specific language helper scripts save-to-pam-env, update-langlist shipped with accountsservice before 23.13.9-8ubuntu7 treat the user-controlled LANGUAGE entry in /.pamenvironment as trusted input. The value is interpolated unescaped into a GNU sed replacement expression, allowing an...
Unity Linux 20.1060a / 20.1070a Security Update: abrt (UTSA-2026-104827)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104827 advisory. A time-of-check time-of-use TOCTOU race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event...
CentOS 9 : glib2-2.68.4-29.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the glib2-2.68.4-29.el9 build changelog. - heap under-read in gkeyfilegetlocalestringlist CVE-2026-58014 - limit D-Bus auth line read length CVE-2026-15588 - off-by-one error in...
SUSE CVE-2026-74439
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry devicepasidtableteardown zeroes the 128-bit scalable-mode context entry with contextclearentry while the Present bit is still set. This creates a windo...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.12)
The version of AOS installed on the remote host is prior to 7.5.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.12 advisory. - A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file...
CVE-2025-26238
In D-Link DI-8100G 17.12.20A1, the flag parameter in mspinfo can be exploited to execute arbitrary code...
CVE-2025-26237
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
CVE-2026-61898
A flaw was found in accountsservice. A local attacker can exploit this by injecting arbitrary shell commands into the user-controlled LANGUAGE entry in the /.pamenvironment file. The Ubuntu-specific language helper scripts process this input unescaped, leading to arbitrary code execution with roo...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fixed RB-tree corruption in the error handling path during probes. The info-node RB-tree member is initialized to zero using kzalloc. If a device does not support ATS, the devicerbtreeinsert call is skipped. If a...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clearing the Present bit before tearing down the scalable-mode context entry The devicepasidtableteardown function zeros the 128-bit scalable-mode context entry using contextclearentry, even when the Present bit is...
PT-2026-80994
Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...
CVE-2025-26237
The D-Link DI-7001 MINI_5G (version 19.10.31A1 ) is susceptible to a code execution vulnerability located in the flag parameter of the msp_info component. An attacker can exploit this flaw to execute arbitrary commands on the affected device. The vulnerability is categorized as Improper Neutraliz...
CVE-2025-26237
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
CVE-2025-26238
D-Link DI-8100G running version 17.12.20A1 is vulnerable to an improper control of generation of code . An attacker can exploit the flag parameter within the msp_info endpoint to achieve arbitrary code execution , allowing for the execution of unauthorized commands on the system. As of the provid...
EUVD-2025-210768
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
PT-2026-80989
Name of the Vulnerable Software and Affected Versions D-Link DI-7001 MINI 5G version 19.10.31A1 Description A code execution issue exists in the msp info endpoint. An attacker can exploit the flag parameter to execute arbitrary commands on the system. Recommendations At the moment, there is no...
CVE-2025-26237
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...
CVE-2025-26237: Improper Neutralization of Special Elements used in a Command
D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...