8875 matches found
CVE-2026-102669 Joyland AI hostname checking disabled
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages...
CVE-2026-102669 Joyland AI hostname checking disabled
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages...
CLEANSTART-2026-UM83284 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Security vulnerability affects the cri-tools package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...
Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_21931)
The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202521931 advisory. kernel: NFS: Fix filehandle bounds checking in nfsfhtodentry CVE-2025-39730 kernel: tcp: Clear tcpsksk-fastopenrsk in tcpdisconnect CVE-2025-39955...
CentOS Linux 8 [TuxCare] Security Update: amanda / amanda-client / amanda-libs / amanda-server (CENTOS-STREAM8:CLSA-2026:1777026752)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1777026752 advisory. - AMANDA Advanced Maryland Automatic Network Disk Archiver before tag-community-3.5.4 mishandles argument checking for runtar.c, a...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an out-of-bounds access issue due to improper bounds checking and result in an unexpected process crash...
CLEANSTART-2026-UA69127 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Security vulnerability affects the buildkitd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...
ROS-20260930-73-0067
The vulnerability of the authenc component in the Linux operating system’s kernel is related to incorrect checking of the amount of data at input. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux kernel net/ceph/auth Heap Buffer Overflow DoS
The vulnerability of the cephhandleauthreply function in the net/ceph/auth.c module, which is part of the networking functions in the Linux kernel, is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...
ROS-20260929-73-0202
The vulnerability of the adv7842cplogstatus function in the drivers/media/i2c/adv7842.c file of the Linux kernel-based multimedia device driver involves a lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
ROS-20260929-73-0183
The vulnerability of the hwmon/w83791d.c component in the Linux operating system is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260929-73-0174
The vulnerability of the usb/asixcommon.c component in the Linux operating system is related to incorrect checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260929-73-0032
The vulnerability of the Linux operating system’s kernel is related to the improper checking of the specified index, position, or offset in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Verifying Graceful Degradation in a Distributed Malware-Detection System with SPIN
Modern endpoint malware detection is distributed: a lightweight agent on each endpoint collects features from a scanned file or process, sends them to a remote server for analysis, and then enforces the returned verdict locally by blocking, quarantining, or disinfecting. Because the endpoint acts...
CVE-2026-94417
When an application enables both OCSP and CRL revocation checking on one WOLFSSLCTX or certificate manager, wolfSSL skips the CRL check for any peer certificate that carries no Authority Information Access OCSP URL, and accepts a certificate the loaded CRL lists as revoked. The soft-fail policy f...
ROS-20260925-73-0179
The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...
Etcd RBAC Permission Bypass
The vulnerability of the RBAC permission checking mechanism when processing nested transaction operations for configuration store Etcd is related to deficiencies in the authorization mechanism. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...
ROS-20260925-73-0175
The vulnerability in the drivers/scsi/smartpqi/smartpqiinit.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Netty Insufficient Data Authenticity Code Execution
The vulnerability of the framework for developing network applications, servers, and client protocols using Netty is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-6730 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...