10702 matches found
PT-2026-86922
Improper Handling of Alternate Encoding vulnerability in ash-project ash double entry allows an attacker to submit several distinct string spellings of the same identifier. AshDoubleEntry.ULID renders a 128-bit ULID as 26 Crockford base-32 characters, but the first character encodes only 3 bits, ...
Linux Distros Unpatched Vulnerability : CVE-2026-80903
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/oa: Fix sync entry leak on OA config emit failure xeoaemitoaconfig releases the sync entries and the syncs array only on its success path. When it fails...
MINI-66J5-JFC4-3C73
Bulletin has no description...
CVE-2026-86179
creationtimestamp| type| source ---|---|--- 2026-09-06 09:42:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3yxjys4sqd66e...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073356)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073356 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range numeventidbits Userspace can restore ...
MINI-8RCW-6W73-42WR
Bulletin has no description...
MINI-QR6X-GM8M-MFQP
Bulletin has no description...
MINI-XP6C-PGV4-64X7
Bulletin has no description...
MINI-W947-MW37-5633
Bulletin has no description...
ECHO-DB1D-DF7F-29B4
Bulletin has no description...
MINI-9RQ9-F63M-WV25
Bulletin has no description...
MINI-CQ8R-8MC8-GJ47
Bulletin has no description...
MINI-3HQ8-9XQQ-XG38
Bulletin has no description...
rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix
...
SUSE CVE-2026-80869
In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...
SUSE CVE-2026-80893
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork copyhugetlbpagerange clears the uffd-wp bit of migration and hwpoison entries with hugepteclearuffdwp, which operates on the present-PTE bit position. Swap entri...
SUSE CVE-2026-80903
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix sync entry leak on OA config emit failure xeoaemitoaconfig releases the sync entries and the syncs array only on its success path. When it fails before the point of no return fence allocation, config buffer...
SUSE CVE-2026-85396
rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...
CVE-2026-52770: Improper Neutralization of Special Elements used in an SQL Command
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki’s public Bazar entry-listing APIs are vulnerable to unauthenticated SQL injection in numeric query / queries filters. For Bazar fields whose value structure is numeric, YesWiki escapes the attacker-controlled filter value bu...