1919 matches found
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013736)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013736 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/netiucv: Fix return type of netiucvtx With clang's kernel control flow integrity kCFI,...
The vulnerability of the control flow analyzer for C language files like Cflow allows attackers to trigger a service failure due to improper cleaning or releasing of resources.
The vulnerability of the control flow analyzer for C language files related to incorrect cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-35378: Incorrect Short Circuit Evaluation
A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase. This implementation flaw prevents the utility from performing proper short-circuiting for logical OR | and AND & operation...
CVE-2026-29643
XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011136)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011136 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrit...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010972)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010972 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/netiucv: Fix return type of netiucvtx With clang's kernel control flow integrity kCFI,...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006948)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006948 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrit...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010909)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010909 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix type of second parameter in odneditdpmtable callback With clang's kernel control...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011019)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011019 advisory. In the Linux kernel, the following vulnerability has been resolved: s390/lcs: Fix return type of lcsstartxmit With clang's kernel control flow integrity kCFI,...
EUVD-2026-23780
A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...
CVE-2026-6608
A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...
CVE-2026-6608
The CVE-2026-6608 issue affects lm-sys fastchat prior to 0.2.36, specifically the Arena Side-by-Side View Handler’s add_text function. The vulnerability enables an attacker to manipulate control flow and can be exploited remotely; public exploit details exist. The root cause was addressed in comm...
CVE-2026-29643
XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...
CVE-2026-6608: Always-Incorrect Control Flow Implementation
A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...
PT-2026-33714
Name of the Vulnerable Software and Affected Versions lm-sys fastchat versions prior to 0.2.37 Description Remote Code Execution is possible in the Arena Side-by-Side View Handler component via the add text function. Manipulation of this function results in incorrect control flow, allowing an...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007545)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007545 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/sti: Fix return type of stidvo,hda,hdmiconnectormodevalid With clang's kernel control flow...
NFTDELTA: Detecting Permission Control Vulnerabilities in NFT Contracts through Multi-View Learning
Permission control vulnerabilities in Non-fungible token NFT contracts can result in significant financial losses, as attackers may exploit these weaknesses to gain unauthorized access or circumvent critical permission checks. In this paper, we propose NFTDELTA, a framework that leverages static...
Always-Incorrect Control Flow Implementation
Overview Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to an inverted time comparison in the OIDC JWKS and token cache processes. An attacker can cause expired tokens to be reused or force repeated network requests to the OIDC provider by...
