262204 matches found
CVE-2026-53340
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix clock and pinctrl state inconsistency in runtime PM In i2cimxruntimesuspend, the clock is disabled before switching the pinctrl state to sleep. If pinctrlpmselectsleepstate fails, the runtime suspend is aborted but...
CVE-2026-53336
In the Linux kernel, the following vulnerability has been resolved: nvmem: layouts: onie-tlv: fix hang on unknown types The EEPROM on my board has a vendor specific entry of type 0x41. When stumbling upon that, this driver hangs in an endless loop. Fix it by keep incrementing the offset on unknow...
CVE-2026-53335
In the Linux kernel, the following vulnerability has been resolved: mm/damon/lrusort: handle ctx allocation failure DAMONLRUSORT allocates the damonctx object for its kdamond in its init function. damonlrusortenabledstore wrongly assumes the allocation will always succeed once tried. If the...
CVE-2026-53327
In the Linux kernel, the following vulnerability has been resolved: debugobjects: Do not fillpool if piblockedon On RT enabled kernels, fillpool ends up calling rtlocklock, which asserts if current::piblockedon is set, because a task can obviously only block on one lock as otherwise the priority...
CVE-2026-2387
creationtimestamp| type| source ---|---|--- 2026-07-01 12:39:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpljxtws6y26 2026-07-01 12:39:35+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpljxyict32a 2026-07-04 10:15:07+00:00| seen|...
CVE-2026-14181
@fastify/middie versions 9.1.0 through 9.3.2 fail to guard the URL normalization step used by the standalone engine when incoming request paths contain malformed percent-encoded sequences. Inputs such as an incomplete percent escape or a truncated multibyte sequence cause the underlying decoder t...
EUVD-2026-40954
MCO is vulnerable to User Enumeration through authentication-related functionalities. The application returns distinguishable responses for valid and invalid users during username reminder and password reset operations. An attacker can leverage these differences to enumerate valid usernames and...
CVE-2026-14181
creationtimestamp| type| source ---|---|--- 2026-07-01 11:47:27+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mplh2pyhpk2z 2026-07-01 12:43:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk6kd5px2u 2026-07-01 12:57:44+00:00| seen|...
CVE-2026-14198
creationtimestamp| type| source ---|---|--- 2026-07-01 11:34:43+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mplgdvyl4c2z 2026-07-01 12:40:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpljyqhw5522 2026-07-01 12:52:43+00:00| seen|...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.68 packages and security update
Red Hat OpenShift Container Platform release 4.14.68 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...
CVE-2026-13454
creationtimestamp| type| source ---|---|--- 2026-07-01 10:51:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpldwfzwlj2q 2026-07-01 11:40:34+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgoh6jhd2h 2026-07-01 12:39:40+00:00| seen|...
CVE-2026-11794
creationtimestamp| type| source ---|---|--- 2026-07-01 09:51:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mplakrdvmc2d 2026-07-01 11:45:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mplgxz7v4x23...
google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...
CVE-2026-56016
creationtimestamp| type| source ---|---|--- 2026-07-01 09:17:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6nzkpfa2o 2026-07-01 17:06:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mplyvlt3kg2f...
CVE-2026-13733
creationtimestamp| type| source ---|---|--- 2026-07-01 09:16:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpl6mcgcha2o 2026-07-01 09:16:13+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpl6md3emm2g 2026-07-01 11:16:06+00:00| seen|...
CVE-2025-15666
A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height lead...
CVE-2026-12575
DVP80ES3 with Improper Resource Shutdown or Release vulnerability...
Cross-site Request Forgery (CSRF)
Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the process that handles user requests without proper validation of request origin. An attacker can perform unauthorized actions on behalf of authenticated users by tricking them into submitting...
