18782 matches found
CVE-2026-31404
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-23423
A flaw was found in the Linux kernel's btrfs file system. This vulnerability occurs in the btrfsuringreadextent function, where memory allocated for 'pages' is not properly freed when errors occur during read operations. This oversight can lead to resource exhaustion, potentially causing a Denial...
CVE-2026-31402 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer rpibufNFSD4REPLAYISIZE to store encoded operation responses. This size was calculated based on OPEN responses and...
CVE-2026-4350 Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter
The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1. This is due to the PMCS::actionhandler method processing the $GET'delete' parameter without any sanitization, authorization check, or nonce verification...
The vulnerability of the btrfs_truncate_block() function in the fs/btrfs/inode.c file of the file system module in Linux kernel allows a attacker to cause a service failure.
The vulnerability of the btrfstruncateblock function in the fs/btrfs/inode.c file of the Btrfs file system in Linux kernels is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the send_flush_mdlog() function in the fs/ceph/mds_client.c module, which is part of the Ceph distributed file system support for Linux operating systems, allows a attacker to cause a service failure.
The vulnerability of the sendflushmdlog function in the fs/ceph/mdsclient.c module, which is part of the Ceph distributed file system support for Linux operating systems, involves a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ext4_expand_extra_isize_ea() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4expandextraisizeea function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to insufficient data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the nilfs_segctor_thread() function in the fs/nilfs2/segment.c file of the NILFS2 file system of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nilfssegctorthread function in the fs/nilfs2/segment.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8143-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8143-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
The vulnerability of the ext4_xattr inode_get() function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ext4xattr inodeget function in the fs/ext4/xattr.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition āInfinite loopā. Exploiting this vulnerability could allow an attacker to cause a servi...
The vulnerability of the ext4_mbrelease_group_pa() function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the ext4mbreleasegrouppa function in the fs/ext4/mballoc.c module of the Ext4 file system in the Linux operating system is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a attacker to cause a service failure...
EUVD-2024-55530
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system...
USN-8145-2 linux-fips, linux-aws-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...
USN-8145-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - UDF file system; - NFC subsystem; - Network traffic control;...
USN-8143-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - UDF file system; - NFC subsystem; -...
USN-8143-2 linux-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - UDF file system; - NFC subsystem; -...
CVE-2024-44303
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system...
CVE-2024-44303
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.1. A malicious application may be able to modify protected parts of the file system...
CVE-2024-44303
CVE-2024-44303 affects macOS Sequoia, with the issue fixed in Sequoia 15.1. The vulnerability allows a malicious application to modify protected parts of the file system due to insufficient checks; Appleās description notes the fix involved improved checks. Connected sources corroborate that the ...