31496 matches found
Sensitive Information Disclosure
undici is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of malformed Cache-Control private directives, allowing private cached responses to be served to other callers or crafted headers to trigger an uncaught TypeError and potentially terminate the...
FreeRDP: FreeRDP: Remote code execution via heap out-of-bounds write in RemoteFX decoding
A flaw was found in FreeRDP. FreeRDP clients using the non-default /cache:codec:rfx option are vulnerable to a heap out-of-bounds write. A malicious Remote Desktop Protocol RDP server can exploit this by manipulating desktop stride and height values during RemoteFX decoding for Cache Bitmap V3...
Malicious code in twork-products-taiga2-products-mobile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0870bb9f10cb88f264e25b839c6001a3b2c7d77777115871ba0e3c6f61ddb84b On require of this package, index.js loads init.js which selects a platform-specific endpoint, reconstructs destination hostnames at runtime from...
Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf869ab3e355848cb77fff3b129c2fe0b80e01286fe28783a0e66e064cee87e On require of the package, index.js loads loader.js which downloads a platform-specific native binary from Cloudflare workers.dev endpoints whose...
MAL-2026-12144 Malicious code in beaver-ui-drawer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ff4f4ef11d2ff4bbba6d98547a1f6c1e5834739b4943f581e057abb9e313ce [email protected] ships a postinstall script setup.js that assembles network destinations at runtime by joining split string fragments to hide...
Malicious code in bigops-auth-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6277d8a41e433b852e10f63e7d2fc48321a4ff7e7705904c09439f3ee2e0542 On require'bigops-auth-cache', index.js loads compat.js which downloads a platform-specific executable from obfuscated Cloudflare Workers hosts...
MAL-2026-12150 Malicious code in bigops-auth-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6277d8a41e433b852e10f63e7d2fc48321a4ff7e7705904c09439f3ee2e0542 On require'bigops-auth-cache', index.js loads compat.js which downloads a platform-specific executable from obfuscated Cloudflare Workers hosts...
CVE-2026-71209
audiobookshelf's authentication-exemption check server/routers/Auth.js matches unauthenticated-allowed GET routes against req.path via a regex requiring a literal /items/:id/cover or /authors/:id/image shape, where req.path retains %2F sequences URL-encoded. CacheManager.handleCoverCache then joi...
CVE-2026-64581
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...
AZL-94482 CVE-2026-64567 affecting package kernel for versions less than 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...
CVE-2026-64567
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...
UBUNTU-CVE-2026-64567
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...
UBUNTU-CVE-2026-64581
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...
CVE-2026-64567
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...
CVE-2026-64581
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...
CVE-2026-64581 xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...
CVE-2026-64581
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...
CVE-2026-64581 xfrm: fix sk_dst_cache double-free in xfrm_user_policy()
In the Linux kernel, the following vulnerability has been resolved: xfrm: fix skdstcache double-free in xfrmuserpolicy xfrmuserpolicy clears the socket dst cache with skdstreset, i.e. the non-atomic skdstsetsk, NULL: it reads skdstcache with rcudereferenceprotected, stores NULL and dstreleases th...
CVE-2026-64581
CVE-2026-64581 is a Linux kernel vulnerability in the xfrm code. The issue arises in xfrm_user_policy(), which clears the socket destination cache (sk_dst_cache) non‑atomically, allowing a race with a per‑socket policy change that can cause the same dst to be released twice, freeing the xfrm_dst ...
CVE-2026-64567 btrfs: reject free space cache with more entries than pages
In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...