CVE-2026-47562

A flaw was found in the NVIDIA GPU Display Driver for Linux. The driver's kernel mode layer fails to properly sanitize user-supplied version strings, allowing a local user to inject crafted text into the kernel log. A successful exploit can lead to log data tampering and a Denial of Service DoS...

CVE-2026-94029

A flaw was found in Apache MINA SSHD. When processing SSH File Transfer Protocol SFTP check-file extensions, the server accumulates file hash verification responses entirely in memory without enforcing a size limit. An authenticated remote attacker can exploit this vulnerability by requesting fil...

CVE-2026-100077

A flaw was found in the Linux kernel's MSM DRM driver. This vulnerability can lead to a Denial of Service DoS during GPU recovery operations. If a hung command submission is retired before the hardware recovery process completes, the driver may release memory buffers that the GPU is still activel...

CVE-2026-47583

A flaw was found in the NVIDIA GPU Display Driver kernel module. A local attacker with standard user privileges can exploit a type confusion vulnerability where the driver misinterprets data structures during processing. Successful exploitation could allow the attacker to execute arbitrary code...

CVE-2026-47587

A flaw was found in nvidia-driver. A local unprivileged user can trigger a use-after-free condition in the NVIDIA GPU Display Driver for Linux, allowing them to execute arbitrary code or escalate privileges on the system. Successful exploitation could also result in a Denial of Service DoS,...

UBUNTU-CVE-2026-47554

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where improper verification of cryptographic signatures may cause signature verification to be bypassed under memory pressure. A successful exploit of this vulnerability might lead to denial of service and data...

UBUNTU-CVE-2026-103432

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar in src/cgi/upsfetch.c used by upsstats.cgi, multimon.cgi, and upsfstats.cgi, a related issue to CVE-2026-15544...

CVE-2026-100274

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...

PSF-2026-43

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-19445 Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

CVE-2026-47568

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause uncontrolled kernel log generation by repeatedly invoking an interface that emits unrate-limited error messages. A successful exploit of this vulnerability might lead to denial of servic...

EUVD-2026-90176

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47567

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...

PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

Summary PyJWKClient.getsigningkeyfromjwttoken — the first step of the JWKS verification flow documented in docs/usage.rst — must decode a token's payload before its signature can be checked, via jwt.apijwt.decodecompletetoken, options="verifysignature": False. That call parses the payload with...

GHSA-42VR-XJ54-VC7V PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

Summary PyJWKClient.getsigningkeyfromjwttoken — the first step of the JWKS verification flow documented in docs/usage.rst — must decode a token's payload before its signature can be checked, via jwt.apijwt.decodecompletetoken, options="verifysignature": False. That call parses the payload with...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the URL parsing of matrix parameters and child outlet names, which stores them as keys on plain JavaScript objects, so a numeric string key leads V8 to convert the object to a dens...

EUVD-2026-85002

jackson-databind retains every unknown raw type ID...

CVE-2026-102984

Astro is a web framework for content-driven websites. Prior to 11.1.3, the @astrojs/node adapter builds a request URL from the Host header, and a malformed port can make that URL invalid. The recovery path reuses the same malformed host and throws an uncaught TypeError: Invalid URL before routing...

CVE-2026-100274

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template...

CVE-2026-100274

In JetBrains YouTrack versions prior to 2026.2.19197 , a project Admin can trigger a Denial of Service (DoS) condition. The root cause involves the use of a notification template . The CVSS v3.1 score is 6.5 (MEDIUM) , with a high impact on availability via a network vector requiring low privileg...