1250351 matches found
CVE-2026-56847
A flaw in the Node.js Permission Model allows traceevents.createTracing.enable to bypass --allow-fs-write restrictions and write trace logs outside intended paths, potentially leading to unauthorized information disclosure. Mitigation Avoid using the traceevents.createTracing.enable function in...
CVE-2026-68421
In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on core-sched forced idle in putprevtaskscx putprevtaskscx warns when a runnable task drops to a lower schedclass without SCXOPSENQLAST, on the assumption that balanceone would have kept it running. Core...
CVE-2026-72581
creationtimestamp| type| source ---|---|--- 2026-08-10 12:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fg6gdf2cjbu76 2026-08-10 15:01:48+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msqel3mkyb22 2026-08-10 15:03:02+00:00| seen|...
CVE-2026-68368 usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...
CVE-2026-72688 OpenSignLabs opensignserver - Missing Authentication for Critical Function
A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...
[SECURITY] [DSA 6426-1] icinga2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6426-1 [email protected] https://www.debian.org/security/ Sebastiaan Couwenberg August 10, 2026 https://www.debian.org/security/faq -...
CVE-2026-72593
creationtimestamp| type| source ---|---|--- 2026-08-10 11:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspzn3mfm62d...
CVE-2026-72592
creationtimestamp| type| source ---|---|--- 2026-08-10 11:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspzjkirgl26 2026-08-10 12:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ga5shuzi2pgvm...
[SECURITY] [DSA 6425-1] openjdk-21 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 10, 2026 https://www.debian.org/security/faq -...
CVE-2026-72568
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
DEBIAN-CVE-2026-72568
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
CVE-2026-71394
GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...
CVE-2026-71391
GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c. The shared-coordinate index boundary check in sfntvarysimpleglyph and sfntvarycompoundglyph uses a strict greater-than comparison instead of greater-than-or-equal, allowing a crafted TrueType variable font ...
UBUNTU-CVE-2026-72568
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
CVE-2026-72568
Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid...
kernel: iio: event: Fix event FIFO reset race
A flaw was found in the Linux kernel's Industrial I/O IIO event subsystem. A local user can exploit a race condition during the reset of the event FIFO First-In, First-Out buffer. This occurs when another thread accesses a newly allocated file descriptor before the FIFO reset is complete. This ca...
PYSEC-2026-3629 Keras: HDF5 virtual datasets can disclose local files
Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...
EUVD-2026-55238
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port...
CVE-2026-72568
Red Hat CNA-LR concluded this CVE is not valid; no patch, advisory, or technical details are present in any connected document, so this CVE ID is rejected/not used and does not represent an active vulnerability entry.
