400533 matches found
PT-2026-72407
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm file leak when nlm do fopen fails A client can repeatedly drive nlm do fopen failures by presenting file handles that the underlying export rejects. After kzalloc obj succeeds in nlm lookup file, the freshly...
PT-2026-72406
In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm file refcount leak on cached nlm do fopen failure The cached-file path in nlm lookup file reaches the found: label unconditionally, even when nlm do fopen fails. At that label result and file-f count are updated...
PT-2026-72660
In the Linux kernel, the following vulnerability has been resolved: nfs: use nfsi-rwsem to protect traversal of the file lock list Lingfeng identified a bug and suggested two solutions, but both appear to have issues. Generally, we cannot release flc lock while iterating over the file lock list t...
PT-2026-72348
In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i mode type Patch series "ocfs2: harden inode validators against forged metadata", v2. This series adds three structural checks to OCFS2 dinode validation so malformed on-disk fields are...
PT-2026-72974
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in close file table ids A ksmbd file can remain alive after logical close while another session holds a temporary reference obtained through ksmbd lookup fd inode. ksmbd close fd currently marks the file...
CVE-2026-74484
In the Linux kernel, the following vulnerability has been resolved: b...
CVE-2026-56389
A flaw was found in GNU Bison. During HTML report generation, the software improperly handles grammar-defined configuration variables. An attacker can provide a specially crafted grammar file that overrides the executable used for XML-to-HTML transformation. This allows for the execution of an...
CVE-2026-74245
A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...
GHSA-H4MF-4V27-HGGJ vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-XHF4-832V-7XCR vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71310 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-41179 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-945V-V9P3-V5XW vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-QW24-GH76-8RVV vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-25QR-6MPR-F7QX vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-GWFQ-86J8-7QHV vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-54526 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines...
CVE-2026-19909
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...
EUVD-2026-58800
PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability. The specific flaw...