1040052 matches found
CVE-2026-2578 Information Disclosure via WebSocket Event When Deleting Unrevealed Burn on Read Posts
Mattermost versions 11.3.x = 11.3.0 fail to preserve the redacted state of burn-on-read posts during deletion which allows channel members to access unrevealed burn-on-read message contents via the WebSocket post deletion event.. Mattermost Advisory ID: MMSA-2026-00579...
PT-2026-25850
Summary The REST API getUsers endpoint in StudioCMS uses the attacker-controlled rank query parameter to decide whether owner accounts should be filtered from the result set. As a result, an admin token can request rank=owner and receive owner account records, including IDs, usernames, display...
The vulnerability of the `btrfs_get_dev_args_from_path()` function in the `fs/btrfs/volumes.c` module of the btrfs file system in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the btrfsgetdevargsfrompath function in the fs/btrfs/volumes.c module of the btrfs file system in the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2026-1393)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...
EulerOS 2.0 SP12 : gnupg2 (EulerOS-SA-2026-1392)
According to the versions of the gnupg2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In GnuPG before 2.4.9, armorfilter in g10/armor.c has two increments of an index variable where one is intended, leading to an out-of-bounds write...
EulerOS 2.0 SP11 : kernel (EulerOS-SA-2026-1610)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the...
EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-1391)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 m...
MiracleLinux 8 : kernel-4.18.0-553.111.1.el8_10 (AXSA:2026-310:19)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-310:19 advisory. kernel: ipv6: BUG in pskbexpandhead as part of calipsoskbuffsetattr CVE-2025-71085 kernel: macvlan: fix possible UAF in macvlanforwardsource...
Ubuntu: Security Advisory (USN-8092-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : grub2 (RHSA-2026:4653)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:4653 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...
The vulnerability of the riscv_iommu_iova_to_phys() function in the drivers/iommu/riscv/iommu.c file of the Linux operating system’s IOMMU driver allows a hacker to cause a service failure.
The vulnerability of the riscviommuiovatophys function in the drivers/iommu/riscv/iommu.c file of the Linux kernel’s IOMMU driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
EulerOS 2.0 SP10 : python3 (EulerOS-SA-2026-1319)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The 'zipfile' module would not check the validity of the ZIP64 End of Central Directory EOCD Locator record offset value would not be used to...
Hunting CUDA Bugs at Scale with cuFuzz
GPUs play an increasingly important role in modern software. However, the heterogeneous host-device execution model and expanding software stacks make GPU programs prone to memory-safety and concurrency bugs that evade static analysis. While fuzz-testing, combined with dynamic error checking tool...
PX4-Autopilot 资源管理错误漏洞
PX4-Autopilot is an open-source drone autopilot system developed by PX4. Versions prior to PX4-Autopilot 1.17.0-rc1 contained a resource management vulnerability. This vulnerability stemmed from the use of reusing objects after their release in the MavlinkShell::available function, which could...
Huawei EulerOS: Security Advisory for gnupg2 (EulerOS-SA-2026-1335)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2026-1478)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When doing multi-threaded LDAPS transfers LDAP over TLS with libcurl,changing TLS options in one thread would inadvertently change th...
CVE-2026-4188
CVE-2026-4188 affects D-Link DIR-619L (firmware 2.06B01). The vulnerability is in the boa component’s formSchedule function; manipulating the curTime argument triggers a stack-based buffer overflow. Exploitation is possible remotely and the exploit has been released publicly. The issue impacts pr...
CVE-2026-4186
A vulnerability was determined in UEditor up to 1.4.3.2. This issue affects some unknown processing of the file php/controller.php?action=uploadimage of the component JSONP Callback Handler. This manipulation of the argument callback causes cross site scripting. The attack can be initiated...
Advisory ROSA-SA-2026-3210
software: libssh 0.9.8 OS: ROSA-CHROME unaffected versions = libssh-0.9.8-3 affected versions libssh-0.9.8-3 CVE-ID: CVE-2025-5318 BDU-ID: 2025-09008 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the sftphandle function of the LibSSH library involves reading data outside of buffer boundaries in...
