Navtor NavBox security vulnerabilities

Navtor NavBox is a shipping information system device developed by the Norwegian company Navtor. It is used for electronic nautical chart management and synchronization of navigation data. There is a security vulnerability in Navtor NavBox. This vulnerability stems from the HTTP service not...

F2FS Heap Buffer Overflow DoS

The vulnerability of the isbitmapvalid function in the fs/f2fs/checkpoint.c module of the F2FS file system support in Linux’s operating system is related to buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to trigger a service failure...

OCFS2 File System Heap Buffer Overflow DoS

The vulnerability of the userdlmdestroylock function in the fs/ocfs2/dlmfs/userdlm.c module of the OCFS2 file system support in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsdozerorange function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsevict inode function in the fs/f2fs/inode.c module of the F2FS file system support in Linux operating systems is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

GFS2 File System Heap Buffer Overflow DoS

The vulnerability of the gfs2checksb function in the fs/gfs2/opsfstype.c file of the GFS2 file system in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsnewnodepage function in the fs/f2fs/node.c file of the F2FS file system in the Linux operating system is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-8070-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8070-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

NFS Network File System DoS

The vulnerability of the nfsdprocwrite function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernels, is related to code errors. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux kernel fs/ntfs/attrib.c Heap Buffer Overflow DoS

The vulnerability of the ntfsattrfind function in the fs/ntfs/attrib.c file of the Linux kernel-based file system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...

nfs-utils: rpc.mountd in the nfs-utils privilege escalation

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

CVE-2026-21423

Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of...

ALSA-2026:3938 Moderate: nfs-utils security update

The nfs-utils packages provide a daemon for the kernel Network File System NFS server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Security Fixes:...

OpenClaw security vulnerabilities

OpenClaw is openclaw open source an intelligent artificial assistant. OpenClaw suffers from a file inclusion vulnerability. An attacker can exploit this vulnerability to read arbitrary files in the local file system...

ALSA-2026:3940 Moderate: nfs-utils security update

The nfs-utils packages provide a daemon for the kernel Network File System NFS server and related tools, which provides better performance than the traditional Linux NFS server used by most users. These packages also contain the mount.nfs, umount.nfs, and showmount programs. Security Fixes:...

File Browser's TUS Delete Endpoint Bypasses Delete Permission Check

Summary A broken access control vulnerability in the TUS protocol DELETE endpoint allows authenticated users with only Create permission to delete arbitrary files and directories within their scope, bypassing the intended Delete permission restriction. Any multi-user deployment where administrato...

CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

DEBIAN-CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...

UBUNTU-CVE-2025-12801

A vulnerability was recently discovered in the rpc.mountd daemon in the nfs-utils package for Linux, that allows a NFSv3 client to escalate the privileges assigned to it in the /etc/exports file at mount time. In particular, it allows the client to access any subdirectory or subtree of an exporte...