9561 matches found
Security update for python311
This update for python311 fixes the following issues: CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. CVE-2025-15282:...
SUSE-SU-2026:0693-1 Security update for python311
This update for python311 fixes the following issues: - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters bsc1257029. - CVE-2025-12781: inadequate parameter check can cause data integrity issues bsc1257108. - CVE-2025-1528...
CVE-2026-1627
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic...
EUVD-2026-8963
WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend. An unauthenticated attacker can connect to the OCPP WebSocket endpoint using a known or discovered charging station identifier, then...
Valkey: Valkey: Data tampering and denial of service via improper null character handling in Lua scripts
A flaw was found in Valkey, a distributed key-value database. A malicious user can exploit this vulnerability by using scripting commands to inject arbitrary information into the response stream. This is caused by improper handling of null characters in the error handling code for Lua scripts...
PT-2026-22231
Name of the Vulnerable Software and Affected Versions Systems utilizing WebSocket endpoints for Open Charge Point Protocol OCPP communication affected versions not specified Description WebSocket endpoints are missing appropriate authentication, allowing attackers to impersonate charging stations...
The vulnerability of the ath11k_reg_notifier() function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ath11kregnotifier function in the drivers/net/wireless/ath/ath11k/reg.c file of the Atheros/Qualcomm wireless communication driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability coul...
The vulnerability of the snd_usb_endpoint_set_params() function in the sound/usb/endpoint.c module of Linux’s sound device support for USB audio devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndusbendpointsetparams function in the sound/usb/endpoint.c module, which is part of Linux’s sound device support for USB devices, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-51781
Name of the Vulnerable Software and Affected Versions n8n versions prior to 2.4.0 Description Authenticated users with workflow creation permissions can inject arbitrary SQL through unescaped identifier values in node configuration parameters. This occurs because the MySQL, PostgreSQL, and...
The vulnerability of the `ksmbd_session_rpc_open()` function in the `fs/smb/server/mgmt/user_session.c` module of the SMB server support in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ksmbdsessionrpcopen function in the fs/smb/server/mgmt/usersession.c module, which is part of the SMB server support in Linux operating systems, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise th...
CVE-2025-67733
A flaw was found in Valkey, a distributed key-value database. A malicious user can exploit this vulnerability by using scripting commands to inject arbitrary information into the response stream. This is caused by improper handling of null characters in the error handling code for Lua scripts...
The vulnerability of SMM communication buffers in AMD’s microprogrammed graphics processors allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of SMM communication buffers in AMD graphics processor microprogramming systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the ttm_bo_evict_swapout_allowable() function in the drivers/gpu/drm/ttm/ttm_bo.c module of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the ttmboevictswapoutallowable function in the drivers/gpu/drm/ttm/ttmbo.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to the assignment of a NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the...
GO-2026-4473 Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git
Improper verification of data integrity values for .idx and .pack files in github.com/go-git/go-git...
USN-8052-1 linux-lowlatency vulnerabilities
It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...
nodejs: Nodejs uninitialized memory exposure
A memory exposure flaw has been discovered in Node.js. A flaw in Node.js's buffer allocation logic can expose uninitialized memory when allocations are interrupted, when using the vm module with the timeout option. Under specific timing conditions, buffers allocated with Buffer.alloc and other...
The vulnerability of the GSSAPI driver standard of MongoDB Go Driver allows attackers to influence the integrity of the protected information.
The vulnerability of the GSSAPI driver standard in the MongoDB Go Driver is related to buffer overflows in dynamic memory. Exploitation of this vulnerability could allow a malicious actor to compromise the integrity of protected information by reading one byte beyond the allocated dynamic memory...
CVE-2024-21953
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity...
CVE-2023-20548
A Time-of-check time-of-use TOCTOU race condition in the AMD Secure Processor ASP could allow an attacker to corrupt memory resulting in loss of integrity, confidentiality, or availability...
Advisory ROSA-SA-2026-3195
Software: lz4 1.8.3 OS: ROSA Virtualization 2.1 unaffected versions = lz4-1.8.3-5.rv3 affected versions lz4-1.8.3-5.rv3 CVE-ID: CVE-2019-17543 BDU-ID: 2023-07612 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the LZ4 lossless data compression algorithm is related to writing beyond buffer boundaries...