19920 matches found
EUVD-2024-55702
In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...
MiracleLinux 9 : postgresql-13.23-3.el9_8 (AXSA:2026-1366:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1366:07 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
PT-2026-65474
The EVTCHNOP expand array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP reset, resulting in dereferencing a NULL pointer...
EUVD-2026-49592
In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smccdcrxhandler by pinning the socket smccdcrxhandler looks up the connection by token under the link group's connslock, drops the lock, and then dereferences conn and the smcsock derived from it, ending in...
K000162463: PostgreSQL vulnerability CVE-2026-6478
Security Advisory Description Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate. This does not affect scram-sha-256 passwords, the default in all supported releases. However, current...
CVE-2026-55973
A flaw was found in Unbound. When the 'dns-error-reporting: yes' option is enabled, a remote attacker can send a specially crafted DNS response containing a malformed EDNS Report-Channel option from a delegated zone they control. This can lead to a stack variable overwrite, causing the Unbound...
CVE-2026-64325
A flaw was found in the Linux kernel's mt76 Wi-Fi driver, affecting mt7921 and mt7925 chipsets. When a channel-switch announcement CSA beacon is received, a timing issue can occur if a station disconnects before a queued work item processes the beacon. This can lead to a NULL pointer dereference ...
BIT-OPENBAO-2025-54999 OpenBao: Timing Side-Channel in Userpass Auth Method
OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 0.1.0 through 2.3.1, when using OpenBao's userpass auth method, user enumeration was possible due to timing difference between non-existent users an...
freerdp: FreeRDP: Arbitrary code execution and denial of service via heap-buffer-overflow
A heap-buffer overflow vulnerability exists in the FreeRDP server's clipboard channel. A remote attacker can exploit this by sending a specially crafted message to the server, which can crash the service Denial of Service or potentially allow the attacker to execute arbitrary code...
UBUNTU-CVE-2026-64221
In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe. Make sure to clear the DMA channel pointer also if buffer allocation fails to avoid passing a pointer to...
MiracleLinux 9 : postgresql:18 (AXSA:2026-1357:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1357:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
Experimental Protocol Fingerprinting in Quantum Networks Via Physical Layer Side Channel Analysis
Quantum communication is a key enabler of next-generation networks, leveraging quantum entanglement to enable a new class of information exchange. While prior work has focused on the theoretical analysis of communication protocols, their exposure to physical layer side channel analysis remains...
SUSE CVE-2026-55973
In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option code 18 from the last upstream response is read and uses the option's length as the length of the agent domain. When a domain name check is performed on the agent domain...
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
...
CVE-2016-6728
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:20+00:00| seen| https://t.me/KaitNews/473 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/473 2026-08-06 01:00:05+00:00| seen| https://t.me/KaitNews/473 2026-08-07 00:59:27+00:00| seen| https://t.me/KaitNews/473...
CVE-2016-4677
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/499 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/499 2026-08-06 01:00:05+00:00| seen| https://t.me/KaitNews/499 2026-08-07 00:59:27+00:00| seen| https://t.me/KaitNews/499...
CVE-2016-8706
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:19+00:00| seen| https://t.me/KaitNews/639 2026-07-27 00:01:56+00:00| seen| https://t.me/KaitNews/639 2026-08-06 00:00:05+00:00| seen| https://t.me/KaitNews/639...
CVE-2016-8622
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:16+00:00| seen| https://t.me/KaitNews/1144 2026-07-27 00:01:53+00:00| seen| https://t.me/KaitNews/1144 2026-08-05 23:00:05+00:00| seen| https://t.me/KaitNews/1144 2026-08-06 00:00:07+00:00| seen| https://t.me/KaitNews/1144...
CVE-2016-9155
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:16+00:00| seen| https://t.me/KaitNews/1010 2026-07-27 00:01:54+00:00| seen| https://t.me/KaitNews/1010 2026-08-05 23:00:05+00:00| seen| https://t.me/KaitNews/1010 2026-08-06 00:00:07+00:00| seen| https://t.me/KaitNews/1010...
CVE-2016-8617
creationtimestamp| type| source ---|---|--- 2026-07-26 07:02:16+00:00| seen| https://t.me/KaitNews/1144 2026-07-27 00:01:53+00:00| seen| https://t.me/KaitNews/1144 2026-08-05 23:00:05+00:00| seen| https://t.me/KaitNews/1144 2026-08-06 00:00:07+00:00| seen| https://t.me/KaitNews/1144...