1932 matches found
Astra Linux – Vulnerability in Linux 5.15
A issue was discovered in ksmbd within the Linux kernel versions 5.15 through 5.18, prior to 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case of smb2write...
Astra Linux – Vulnerability in Linux, Linux 5.10
An improper update of the reference count vulnerability in the net/sched component of the Linux kernel allows a local attacker to escalate privileges to root. This issue affects Linux Kernel versions prior to 5.18, as well as version 4.14 and later versions...
Astra Linux – Vulnerability in PostgresSQL 11
Improper validation of the “oidvector” type in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out the possibility of attacks where confidential information is included in the disclosed bytes, but such attacks seem unlikely. Versions of PostgreSQL pri...
Nightmare-Windows-0-day-exp
Windows Zero-Day Exploit Collection !Research Use Onlyhtt...
CVE-2026-52878
CVE-2026-52878 affects Klever-Go (versions 1.7.14–1.7.17). A nil RawData sub-message in protobuf Transaction triggers a nil-pointer panic when txVersionChecker.CheckTxVersion dereferences tx.RawData.Version without a nil check, causing a crash in the libp2p pubsub/the node process. The crash prop...
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account...
CVE-2026-64636
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database...
ROOT-APP-MAVEN-CVE-2026-5598 CVE-2026-5598 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2026-5598 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
CVE-2026-65574
Unauthenticated PHP Object Injection in Abogado = 1.18 versions...
CLSA-2026-1782435548 TuxCare security update for @angular (15 CVEs)
TuxCare rebuilt 18 @angular packages to address 15 CVEs. Fixed in 5.2.11-tuxcare.8...
CLSA-2026-1781571275 TuxCare security update for express (8 CVEs)
TuxCare rebuilt express to address 8 CVEs. Fixed in 4.18.1-tuxcare.1...
CLSA-2026-1775521864 TuxCare security update for 18 packages (1 CVE)
TuxCare rebuilt 18 packages to address 1 CVE. Fixed in 1.19.3-tuxcare.1...
CLSA-2025-1756253007 TuxCare security update for 38 packages (18 CVEs)
TuxCare rebuilt 38 packages to address 18 CVEs. Fixed in 9.0.75-tuxcare.1...
SUSE CVE-2026-53666
React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows attacker-supplied input to overwrite certain aspects of errors caught by the SSR process, then it was possible for an attacker to trigger unexpected constructor execution on...
CVE-2026-48031 Go Restful API Boilerplate: Hardcoded JWT Secret "random" Allows Token Forgery
go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...
MGASA-2026-0312 Updated kernel, kmod, bluez, firmware, wireless-regdb and drakx-installer-images packages fix security vulnerabilities
Upstream kernel version 6.18.39 fixes bugs and vulnerabilities. The kmod, bluez, wireless-regdb, firmware and drakx-installer-images packages have been updated to work with this new kernel...
DEBIAN-CVE-2026-55768
GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum...
CLEANSTART-2026-YH06541 Security fixes in airflow-3 3.1.8-r4
Package airflow-3 version 3.1.8-r4 fixes 18 vulnerabilities: ghsa-hpj7-wq8m-9hgp, ghsa-xcgm-r5h9-7989, ghsa-2fqr-mr3j-6wp8, ghsa-4m7w-qmgq-4wj5, ghsa-6jv3-5f52-599m...
CLEANSTART-2026-IN49367 Security fixes in grafana-alloy 1.15.0-r0
Package grafana-alloy version 1.15.0-r0 fixes 18 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-34165, CVE-2026-33762, CVE-2026-34986...