The vulnerability of the Delegated License Service (DLS) component of NVIDIA’s licensing system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Delegated License Service DLS component of NVIDIA’s licensing system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of microprogrammed software in embedded access controllers of Dell iDRAC9 lies in the insufficient protection of service data when transitioning to debugging mode, allowing a intruder to gain unauthorized access to protected information.

The vulnerability of microprogramming software in embedded access controllers of Dell iDRAC9 relates to insufficient protection of service data when entering debugging mode. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the ttwu_queue_cond() function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ttwuqueuecond function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, involves an unvalidated error condition. Exploiting this vulnerability could allow a remote attacker to compromise the...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

Mbed TLS -- vulnerabilities

https://mbed-tls.readthedocs.io/en/latest/security-advisories/ reports: Client impersonation while resuming a TLS 1.3 session CVE-2026-34873 Entropy on Linux can fall back to /dev/urandom CVE-2026-34871 PSA random generator cloning CVE-2026-25835 Compiler-induced constant-time violations...

The vulnerability of the exclude_super_stripes() function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the excludesuperstripes function in the fs/btrfs/block-group.c file of the btrfs file system in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploitation of this vulnerability could allow a remote attacker to compromise the...

WordPress DSGVO snippet for Leaflet Map and its Extensions plugin <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'unset' Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'unset' Attribute vulnerability discovered by zaim in WordPress Plugin DSGVO snippet for Leaflet Map and its Extensions versions = 3.1...

The vulnerability of the xf_AppUpdateWindowFromSurface() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfAppUpdateWindowFromSurface function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-4283

The WP DSGVO Tools GDPR plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38. This is due to the super-unsubscribe AJAX action accepting a processnow parameter from unauthenticated users, which bypasses the intended email-confirmation...

The vulnerability of the rtw_wx_set_scan() function in the drivers/staging/r8188eu/os_dep/ioctl_linux.c module allows a hacker to cause a service failure. This vulnerability exposes additional devices supported by the Linux operating system’s kernel.

The vulnerability of the rtwwxsetscan function in the drivers/staging/r8188eu/osdep/ioctllinux.c module, which supports additional devices in the Linux operating system, is related to insufficient protection for service data. Exploiting this vulnerability could allow an attacker to cause a servic...

DEBIAN-CVE-2026-33222

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, users with JetStream admin API access to restore one stream could restore to other stream names, impacting data which should have been protected against them...

CVE-2026-33222

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, users with JetStream admin API access to restore one stream could restore to other stream names, impacting data which should have been protected against them...

CVE-2026-33222

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, users with JetStream admin API access to restore one stream could restore to other stream names, impacting data which should have been protected against them...

CVE-2026-33222

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system. Prior to versions 2.11.15 and 2.12.6, users with JetStream admin API access to restore one stream could restore to other stream names, impacting data which should have been protected against them...

WordPress WP DSGVO Tools (GDPR) plugin <= 3.1.38 - Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users vulnerability

Missing Authorization to Unauthenticated Account Destruction of Non-Admin Users vulnerability discovered by shark3y in WordPress Plugin WP DSGVO Tools GDPR versions = 3.1.38...

The vulnerability of the sgl_sge_nr_set() function in the drivers/crypto/hisilicon/zip/zip_crypto.c file of the Linux kernel cryptographic accelerator driver allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the sglsgenrset function in the drivers/crypto/hisilicon/zip/zipcrypto.c file of the Linux kernel’s cryptographic accelerator driver is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to...

Understanding Wiz’s Approach to Securing the AI Supply Chain

As organizations race to deploy AI, securing the rapidly expanding ecosystem of models, data, and dependencies has become a critical priority, much of which can be addressed by Wiz’s CNAPP solution...

EUVD-2026-14735

The WP DSGVO Tools GDPR plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38. This is due to the super-unsubscribe AJAX action accepting a processnow parameter from unauthenticated users, which bypasses the intended email-confirmation...

ROS-20260324-73-0010

A vulnerability in the f2fs component of the Linux operating system kernel is related to the use of memory after it has been freed. Exploitation of the vulnerability allows an attacker to affect confidentiality, integrity and availability of protected information...

The vulnerability of the Azure Data Factory cloud service, related to insufficient protection of operational data, allows a hacker to disclose protected information.

The vulnerability of the Azure Data Factory service is related to insufficient protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that should be protected...