4181 matches found
Security update for rsyslog
This update for rsyslog fixes the following issue input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...
SUSE-SU-2026:3398-1 Security update for rsyslog
This update for rsyslog fixes the following issue - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910...
FreeBSD Security Advisory - FreeBSD-SA-26:54.sysvsem
FreeBSD Security Advisory - The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been...
Rockwell Automation CompactLogix Improper Validation of Integrity Check Value (CVE-2025-11694)
A security issue exists within the affected CompactLogix 5370 controllers due to missing validation of sequence numbers and source IP addresses in the CIP protocol. An attacker can abuse the exposed Connection IDs visible on the controller's web interface to send forged CIP packets, resulting in ...
FreeBSD -- Heap out-of-bounds access in semctl(2)
Problem Description: The GETALL and SETALL commands in semctl2 recorded the number of semaphores in the target set, dropped the lock protecting the set, allocated a buffer sized for that count, and reacquired the lock. A sequence-number check was used to verify that the set had not been replaced ...
Springboot Actuator startup Detection
The startup endpoint provides information about the application’s startup sequence. !/usr/bin/env python3 -- coding: utf-8 -- """The startup endpoint provides information about the application’s startup sequence.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...
Elasticsearch 8.x < 8.19.18 / 9.0.x < 9.3.7 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-56 / ESA-2026-57)
The version of Elasticsearch installed on the remote host is 8.x prior to 8.19.18, or 9.0.x prior to 9.3.7, 9.4.x prior to or 9.4.4. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-56 and ESA-2026-57 advisories. - Uncontrolled Resource Consumption CWE-400 in...
CVE-2026-66390 Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Wicket. This issue affects Apache Wicket: from 9.0.0 through 9.23.0, from 10.0.0 through 10.9.0. Users are recommended to upgrade to version 10.10.0, which fixes the issue...
SUSE CVE-2026-64473
In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing devres VFIO device debugfs files created with debugfscreatedevmseqfile store a devres allocated debugfsdevmentry as inode private data. vfiounregistergroupdev currently calls...
SUSE CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64437
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of a deferred filelock on SMB2CLOSE then SMB2CANCEL Commit f580d27e8928 "ksmbd: fix use-after-free of a deferred filelock on double SMB2CANCEL" made smb2cancel skip a work whose state is...
UBUNTU-CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
UBUNTU-CVE-2026-64462
In the Linux kernel, the following vulnerability has been resolved: PCI: altera: Fix resource leaks on probe failure The chained IRQ handler is set during probe, but is only removed during the driver remove. If pcihostprobe fails, the handler and INTx IRQ domain remain set even though the...
CVE-2026-64479
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64479
CVE-2026-64479 concerns the Linux kernel ALSA sequencer, where snd_seq_event_dup() can leak 4 bytes of uninitialized kernel heap memory. The issue arises in the UMP-enabled path: when copying an incoming event into a pool cell, the code conditionally zeros cell->ump.raw.extra only if size even...
CVE-2026-64479 ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix uninitialised heap leak in sndseqeventdup sndseqeventdup copies an incoming event into a pool cell and, in the UMP-enabled build, clears the trailing cell-ump.raw.extra word that the memcpy did not cover. The guard...
CVE-2026-64432
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in logreplay copylcns In the analysis pass of $LogFile journal replay, logreplay copies LCNs from each action log record into an existing Dirty Page Table DPT entry without bounding th...
PT-2026-64700
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An uninitialized heap leak exists in the ALSA sequencer. The snd seq event dup function copies an incoming event into a pool cell. In UMP-enabled builds, a check is performed to clear th...
PT-2026-64694
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VFIO component where vfio unregister group dev calls vfio device del before vfio device debugfs exit. Because device del releases devres device-managed resources,...