13223 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-80791
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-auth: zero the AUTHRECEIVE response buffer nvmetexecuteauthreceive allocates the response buffer with kmalloc sized by the host-supplied AUTHRECEIVE...
PT-2026-86261
Name of the Vulnerable Software and Affected Versions Flatpak affected versions not specified Description A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This occurs because a privileged chmod operation executes before the OSTree...
PT-2026-85407
The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as draft, pending, private and scheduled posts, when a view has...
The vulnerability of the pcpu_init_value() function in the kernel/bpf/hashtab.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to access protected information or cause a service failure.
The vulnerability of the pcpuinitvalue function in the kernel/bpf/hashtab.c module, which is part of the Linux kernel’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access protected...
The vulnerability of the dump_mac_header() function in the net/netfilter/nf_log_syslog.c module of the netfilter component in the Linux operating system’s kernel allows a attacker to access protected information or cause a service failure.
The vulnerability of the dumpmacheader function in the net/netfilter/nflogsyslog.c module of the netfilter component in the Linux kernel lies in the fact that it allows data to be written outside of the buffer. Exploiting this vulnerability could enable an attacker to access protected information...
CVE-2026-85508: Stack-based Buffer Overflow
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcipv6info in ipmi-oem/ipmi-oem-dell.c cmc-ipv6-info subcommand to dell get-system-info...
Linux Distros Unpatched Vulnerability : CVE-2026-80761
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: ISO: zero the sockaddr before returning it in getname isosockgetname fills a struct sockaddriso in place and returns its size without clearing it...
PT-2026-85401
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the output dell system info cmc info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when...
PT-2026-86204
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SELinux component where the system fails to ensure every boolean value is defined. The p bools.nprim value is derived from the policy image regardless of the actua...
CVE-2026-85507: Stack-based Buffer Overflow
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell get-system-info...
CVE-2026-85507
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in outputdellsysteminfocmcinfo in ipmi-oem/ipmi-oem-dell.c cmc-info subcommand to dell get-system-info...
Linux Distros Unpatched Vulnerability : CVE-2026-76176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admindouble due to improper processing of the values in the ID field included in the...
The vulnerabilities of the functions qdisc_pkt_len_segs_init() and __dev_queue_xmit() in the net/core/dev.c module of the Linux kernel allow an attacker to access protected information or cause service failures.
The vulnerabilities of the functions qdiscpktlensegsinit and devqueuexmit in the net/core/dev.c module of the Linux kernel are related to incorrect assumptions about the organization of data or memory. Exploiting these vulnerabilities can allow an attacker to access protected information or cause...
CVE-2026-69857
creationtimestamp| type| source ---|---|--- 2026-09-03 23:30:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/73bchslpzokny 2026-09-08 22:01:05+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:00+00:00| seen|...
CVE-2026-85425
creationtimestamp| type| source ---|---|--- 2026-09-03 23:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3munl2dit722y 2026-09-04 00:08:24+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3munocmhb522b...
GHSA-5FHR-F75J-8WR9 SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)
CVE: This vulnerability corresponds to CVE-2026-72800. Summary POST /api/av/getAttributeViewKeysByID returns a database's full column schema with no publish-access filtering, while its sibling getAttributeViewKeys applies the filter for reader sessions. Two further endpoints,...
CVE-2026-64199
creationtimestamp| type| source ---|---|--- 2026-09-03 22:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/asphyj5lbfewk 2026-09-03 23:02:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munkmr6o4224...
CVE-2026-64200
creationtimestamp| type| source ---|---|--- 2026-09-03 22:39:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4ctwqq7rjfos7 2026-09-03 23:02:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munkmxz2dk2l...
CVE-2026-68585
creationtimestamp| type| source ---|---|--- 2026-09-03 22:35:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-pm3w-vxp9-ccwc 2026-09-04 13:04:27+00:00| seen| https://gist.github.com/alon710/0a73f204f4113f41e2621c39634bb023...