Cisco TelePresence Video Communication Server Expressway: Code Injection Vulnerability

Cisco TelePresence Video Communication Server Expressway has a code injection vulnerability. This vulnerability stems from a code injection issue, which may allow for the execution of arbitrary code...

NoMachine encryption issue vulnerabilities

NoMachine version 9.7.3 has an encryption-related vulnerability. This vulnerability stems from insufficient entropy during the generation of credentials in the Redis database access authentication mechanism. Attackers need to execute low-privilege code on the target system first. This may allow...

Pillow buffer error vulnerability

Versions 9.4.0 through 13.0.0 of Pillow contain a buffer error vulnerability. This vulnerability arises when the ImagingJpegEncode function calls jpegwritemarker for JPEG COM annotations; specifically, when the ICC configuration file fills the encoding buffer exactly to 65536 bytes. Libjpeg write...

Lagoon command injection vulnerability

Versions prior to Lagoon 2.33.2 contain a command injection vulnerability. This vulnerability arises because the ssh service in Lagoon Core allows attackers with Lagoon user accounts to execute arbitrary code, potentially leading to privilege escalation...

UBUNTU-CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

CVE-2026-95168

An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the getrulesimportpaths in thefuck/corrector.py and Rule.frompath in thefuck/types.py...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-93119

A flaw was found in the kernel. Specifically, within the USB LJCA driver's ljcaenumerategpio function, an attacker with a specially crafted malicious LJCA device could provide an unbounded banknum value. This improper handling of input leads to a stack overflow, which could result in a denial of...

CVE-2026-90417

A flaw was found in the Linux kernel's RDMA/cxgb4 component. When the device enters a fatal error state or experiences an allocation failure within the writetptentry function, it can lead to a memory leak and a double free vulnerability. A local attacker could potentially exploit this issue to...

CVE-2026-93163

A flaw was found in the hwrng core component of the Linux kernel. When the hwrngregister function fails during the registration process, it does not properly remove the hardware random number generator RNG from the global list. This oversight creates a dangling reference, which can lead to a...

CVE-2026-93134

A flaw was found in the Linux kernel. When the printk function handles legacy console printing, a specific scenario involving context handover can lead to a use-after-free vulnerability. This occurs because the system fails to verify if a memory area has been freed after a handover, potentially...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

gvfs: SFTP: heap-based buffer overflow in read_reply()

A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...

CVE-2026-93104

A flaw was found in the Linux kernel RDMA/rvt component. The rvtallocdevice function incorrectly returns a pointer to memory that has already been deallocated after a port allocation failure. This allows callers to dereference the freed memory, leading to a use-after-free vulnerability. This issu...

CVE-2026-93094

A flaw was found in the ath12k Wi-Fi driver of the Linux kernel. This vulnerability occurs during the rollback of an Access Point AP virtual device vdev creation. If a peer creation step fails, the system can improperly free memory while still holding references to it, leading to a use-after-free...

CVE-2026-93079

A flaw was found in the Linux kernel's CXL Compute Express Link feature handling. The cxlctlgetfeature function does not properly validate the size of the output buffer against a user-controlled count value. This oversight allows a local attacker to provide a count larger than the allocated buffe...

CVE-2026-93060

A flaw was found in the Linux kernel's Adreno GPU driver. This use-after-free vulnerability occurs in the a6xxgpuinit function. Specifically, the a6xxdestroy function frees the a6xxgpu memory, but adrenogpu continues to point to the freed memory. An attacker could potentially exploit this to caus...