CVE-2026-2484

CVE-2026-2484 affects IBM InfoSphere Information Server versions 11.7.0.0 through 11.7.1.6. The underlying flaw is information exposure due to overly verbose error messages, potentially revealing sensitive internal details. IBM’s security bulletin and multiple references confirm the affected vers...

EUVD-2026-14498

AVideo has Pre-Captcha User Enumeration and Account Status Disclosure in Password Recovery Endpoint...

SUSE CVE-2026-23361

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23323

A flaw was found in the Linux kernel's macsmc-hwmon driver, which is responsible for managing hardware monitoring on Apple Silicon systems. Incorrect sensor population logic could lead to out-of-bounds memory access or data corruption. Additionally, a flaw in the float conversion routines could...

SUSE CVE-2026-4716

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...

CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

CVE-2026-23361 PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel, which generates a PCI posted write transaction. There's no completio...

SUSE CVE-2026-33167

Action Pack is a Rubygem for building web applications on the Rails framework. In versions on the 8.1 branch prior to 8.1.2.1, the debug exceptions page does not properly escape exception messages. A carefully crafted exception message could inject arbitrary HTML and JavaScript into the page,...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type mixing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from uninitialized lists and pointers, and may lead to improper error handling...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from misaligned atomic reads. This vulnerability may lead to ARM64 alignment errors and kernel crashes...

The vulnerability of the hsw_disable_crt() function in the drivers/gpu/drm/i915/display/intel_crt.c module of the Linux kernel’s Direct Rendering Infrastructure (DRI) support driver allows a attacker to cause a service failure.

The vulnerability of the hswdisablecrt function in the drivers/gpu/drm/i915/display/intelcrt.c module of the DRI support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mgmt_init_hdev() function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mgmtinithdev function in the net/bluetooth/mgmt.c module of the Linux kernel’s Bluetooth subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the openstack-barbican component in the Red Hat OpenStack Platform cloud service platform is related to errors in information processing. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-23361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Endpoint drivers use dwpcieepraisemsixirq to raise an MSI-X interrupt to the host using a writel,...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper handling of short interrupt messages, potentially leading to data parsing errors...

The vulnerability of the ixgbe_sw_init() function in the drivers/net/ethernet/intel/ixgbe/ixgbe_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a system crash.

The vulnerability of the ixgbeswinit function in the drivers/net/ethernet/intel/ixgbe/ixgbemain.c file of the Linux Ethernet adapter driver module is related to blocking mechanism errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the max_corrected_read_errors_store() function in the drivers/md/md.c module of the multi-device (RAID and LVM) Linux kernel driver allows a malicious actor to cause service failure.

The vulnerability of the maxcorrectedreaderrorsstore function in the drivers/md/md.c module of the Linux device driver for multiple devices RAID and LVM involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability can allow a...

EUVD-2026-15023

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking...

DEBIAN-CVE-2026-4371

A malicious mail server could send malformed strings with negative lengths, causing the parser to read memory outside the buffer. If a mail server or connection to a mail server were compromised, an attacker could cause the parser to malfunction, potentially crashing Thunderbird or leaking...