32623 matches found
The vulnerability of the ip6_find_1stfragopt() function in the include/net/ipv6.h module of the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the ip6find1stfragopt function in the include/net/ipv6.h module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of ClamBC, a byte-code interpreter in the ClamAV antivirus software, allows a perpetrator to execute arbitrary code or cause a service failure.
The vulnerability of the byte-code interpreter in the ClamAV antivirus software package ClamBC is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause system failures...
The vulnerability of the `tcp_packets_in_flight()` function in the `include/net/tcp.h` module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the tcppacketsinflight function in the include/net/tcp.h module of the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the iommu_init_early_dart() function in the arch/powerpc/sysdev/dart_iommu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to trigger a service failure.
The vulnerability of the iommuinitearlydart function in the arch/powerpc/sysdev/dartiommu.c module of the PowerPC platform support for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to cause a system failure...
ROS-20260306-73-0025
A vulnerability in the archmemoryfailure function of the Linux operating system kernel is related to state management errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
EUVD-2026-9930
OpenClaw versions 2026.1.5 prior to 2026.2.12 fail to enforce mandatory authentication on the /agent/act browser-control HTTP route, allowing unauthorized local callers to invoke privileged operations. Remote attackers on the local network or local processes can execute arbitrary browser-context...
CVE-2026-28405
MarkUs is a web application for the submission and grading of student assignments. Prior to version 2.9.1, the courses//assignments//submissions/htmlcontent route reads the contents of a student-submitted file and renders them without sanitization. This issue has been patched in version 2.9.1...
GHSA-GQ2M-77HF-VWGH OliveTin Session Fixation: Logout Fails to Invalidate Server-Side Session
Summary OliveTin does not revoke server-side sessions when a user logs out. Although the browser cookie is cleared, the corresponding session remains valid in server storage until expiry default ≈ 1 year. An attacker with a previously stolen or captured session cookie can continue authenticating...
CVE-2026-30795
The CVE concerns the RustDesk Client (rustdesk-client) across Windows, macOS, Linux, iOS, and Android. The vulnerability affects the Heartbeat sync loop modules, specifically the src/hbbs_http/sync.Rs code path and the Heartbeat JSON payload construction, where cleartext transmission of sensitive...
CVE-2026-30795 RustDesk HTTP Client Silently Accepts Invalid TLS Certificates After Handshake Failure
Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbshttp/sync.Rs and program routine...
CVE-2026-30794
CVE-2026-30794 entry is rejected/not used per the Initial Description.
CVE-2026-30794
...
CVE-2026-30791 RustDesk Client Accepts Pseudo-Encrypted Config Strings Without Cryptographic Validation
Use of a Broken or Risky Cryptographic Algorithm vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient Config import, URI scheme handler, CLI --config modules allows Retrieve Embedded Sensitive Data. This vulnerability is associated wit...
UBUNTU-CVE-2026-25702
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before...
CVE-2026-25702
CVE-2026-25702 affects SUSE Linux Enterprise Server 12 SP5 where the kernel vulnerability in nftables stems from improper access control, causing firewall rules managed by nftables to be ineffective. The issue impacts SLES 12 SP5 versions from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 up to 9c294e...
SUSE CVE-2026-23238
In the Linux kernel, the following vulnerability has been resolved: romfs: check sbsetblocksize return value romfsfillsuper ignores the return value of sbsetblocksize, which can fail if the requested block size is incompatible with the block device's configuration. This can be triggered by settin...
CVE-2026-27352
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Starto starto allows Reflected XSS.This issue affects Starto: from n/a through 2.2.5...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005720)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005720 advisory. In the Linux kernel, the following vulnerability has been resolved: net: sched: cake: fix null pointer access issue when cakeinit fails When the default qdisc is cak...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-005428)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005428 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in...