CentOS Linux 6 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-debug / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779738827)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779738827 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported version...

CVE-2026-102092: Improper Neutralization of Input During Web Page Generation

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting XSS that could allow an authenticated user to store crafted content that executes arbitrary JavaScript in another user's authenticated session when they preview shared content. This could potentially lead to session...

CentOS Linux 6 [TuxCare] Security Update: mysql / mysql-bench / mysql-devel / mysql-embedded / etc (CENTOS6:CLSA-2026:1777683582)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1777683582 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.59...

AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1785143860)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785143860 advisory. - A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This i...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2026:1785153163)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785153163 advisory. - A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This i...

ROS-20260930-73-0120

The vulnerability in the drivers/gpu/drm/exynos/exynosdrmvidi.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources. Exploiting this vulnerability can allow an...

ROS-20260930-73-0017

The vulnerability of the interruptcntprobe function in the drivers/counter/interrupt-cnt.c module of the Linux operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

ROS-20260930-73-0124

The vulnerabilities of the functions qla2x00updateoptrom and qla2x00managehoststats in the drivers/scsi/qla2xxx/qlabsg.c module of the SCSI device driver for the Linux operating system are related to operations involving resources after their expiration. Exploiting these vulnerabilities could all...

CVE-2026-103237: Authorization Bypass Through User-Controlled Key

MISP contains an improper input validation vulnerability in its ORM save path. When a user submits data through various endpoints attribute add/edit, event edit, free-text import, sighting capture, shadow attribute proposal, event report creation, object reference add, user admin edit, the...

ROS-20260930-73-0009

The vulnerability of the osdmapapplyincremental function in the net/ceph/osdmap.c module of the Linux kernel is related to an uncontrolled, exploitable condition. Exploitation of this vulnerability could allow a remote attacker to compromise the integrity of protected information or cause service...

Linux hardware monitoring driver pt5161l_read_block_data Heap Buffer Overflow

The vulnerability of the pt5161lreadblockdata function in the drivers/hwmon/pt5161l.c file of the Linux operating system’s device monitoring driver is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability coul...

Linux inet_csk_listen_stop Heap Buffer Overflow DoS

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

mac80211 Stack Use-After-Free

The vulnerability of the function ieee80211prepconnection in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability could allow an attacker to compromise the...

Linux kernel net/batman-adv/bat_iv_ogm.c Buffer Overflow DoS

The vulnerability of the batadvivogmsendtoif function in the net/batman-adv/bativogm.c module, which is part of the Linux kernel’s networking functions, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to compromise the...

Crosswork Data Gateway Auth Bypass

The vulnerability of the Crosswork Data Gateway data collection platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected informatio...

Cisco Secure Workload protection Multi-cloud Data Center Input Validation

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of t...

Linux USB solenoids yurex_probe Heap Buffer Overflow

The vulnerability of the yurexprobe function in the drivers/usb/misc/yurex.c module of the Linux device driver for USB devices relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility...

Linux kernel OVPN TCP Socket Detach

The vulnerability of the ovpntcpsocketdetach function in the drivers/net/ovpn/tcp.c file of the Linux kernel’s network device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the vpum2mdevicerun function in the drivers/media/platform/amphion/vpuv4l2.c file of the Linux multimedia device driver module is related to the state of the race condition involving the signal handler. Exploiting this vulnerability could allow an attacker to compromise the...

Linux device tree driver Heap Buffer Overflow DoS

The vulnerability of the testdrvprobe function in the drivers/of/unittest.c module of the device tree driver and kernel open-source software for Linux operating systems is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to...