PT-2026-32052

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Autonomous Digital Experience Manager on Windows affected versions not specified Description A certificate validation issue exists in Palo Alto Networks Autonomous Digital Experience Manager on Windows. An unauthenticated...

PT-2026-31329

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006582 advisory. In the Linux kernel, the following vulnerability has been resolved: x86/MCE: Always save CS register on AMD Zen IF Poison errors The Instruction Fetch IF units on...

PT-2026-31550

Name of the Vulnerable Software and Affected Versions SourceCodester Pharmacy Product Management System version 1.0 Description A security flaw exists in SourceCodester Pharmacy Product Management System 1.0. The issue is located in an unknown part of the add-sales.php file within the POST...

SourceCodester Pharmacy Product Management System 安全漏洞

SourceCodester Pharmacy Product Management System is an open-source medication management system developed by SourceCodester. Version 1.0 of the SourceCodester Pharmacy Product Management System contains a security vulnerability. This vulnerability stems from incorrect handling of the parameter...

The vulnerability of the analytics and automation platform for managing cloud data centers of Cisco Nexus, related to errors in the certificate validation process, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco Nexus Dashboard analytics and cloud computing platform relates to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

PT-2026-31549

Name of the Vulnerable Software and Affected Versions SourceCodester Online Food Ordering System version 1.0 Description A vulnerability exists in the function save product of the file /Actions.php within the POST Parameter Handler component. Manipulation of the price argument can lead to busines...

SourceCodester Online Food Ordering System 安全漏洞

The SourceCodester Online Food Ordering System is an open-source online ordering system developed by SourceCodester. Version 1.0 of the SourceCodester Online Food Ordering System has a security vulnerability. This vulnerability stems from the handling of the parameter ‘price’ in the ‘saveproduct’...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-006723)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006723 advisory. In the Linux kernel, the following vulnerability has been resolved: xfs: do not propagate ENODATA disk errors into xattr code ENODATA aka ENOATTR has a very specifi...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...

CVE-2026-34045

Podman Desktop prior to 1.26.2 contains an unauthenticated HTTP server that, due to missing connection limits and timeouts, can be abused over the network to trigger denial-of-service conditions and to extract sensitive information. The vulnerability can exhaust file descriptors and kernel memory...

RLSA-2026:6005 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP: Arbitrary code execution via heap out-of-bounds write ...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities, which stem from logical errors and may lead to remote denial-of-service attacks...

ROS-20260407-73-0006

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the system administration program Sudo arises from errors in privilege management when processing and checking parameters setuid, setgid, and setgroups. This allows a malicious individual to elevate their privileges.

The vulnerability of the system administration program Sudo is related to errors in privilege management when processing and checking parameters such as setuid, setgid, and setgroups. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the actGate() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the actGate function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the AppleEvents component in macOS operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the AppleEvents component in macOS operating systems is related to state management errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the `mspro_block_bd_open()` function in the `drivers/memstick/core/mspro_block.c` file of the Sony MemoryStick driver module for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the msproblockbdopen function in the drivers/memstick/core/msproblock.c file of the Sony MemoryStick driver module in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

AVideo: Unauthenticated Information Disclosure via Disabled CLI Guard in install/test.php

Summary The install/test.php diagnostic script has its CLI-only access guard disabled by commenting out the die statement. The script remains accessible via HTTP after installation, exposing video viewer statistics including IP addresses, session IDs, and user agents to unauthenticated visitors...

Improving ML Attacks on LWE with Data Repetition and Stepwise Regression

The Learning with Errors LWE problem is a hard math problem in lattice-based cryptography. In the simplest case of binary secrets, it is the subset sum problem, with error. Effective ML attacks on LWE were demonstrated in the case of binary, ternary, and small secrets, succeeding on fairly sparse...