308478 matches found
EUVD-2026-62682
Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker with service access to the service processor can supply a carefully crafted command that could leak the contents of hardware registers th...
CVE-2026-72479
A flaw was found in the Linux kernel's iio: accel: mma8452 module. When an I2C read operation fails, the mma8452read function incorrectly returns a success status. This can lead to the mma8452readraw function using uninitialized stack memory, potentially resulting in information disclosure...
CVE-2026-71106
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:36+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-62552
creationtimestamp| type| source ---|---|--- 2026-08-19 17:50:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70743
creationtimestamp| type| source ---|---|--- 2026-08-19 17:48:39+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-71056
creationtimestamp| type| source ---|---|--- 2026-08-19 17:47:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-70752
creationtimestamp| type| source ---|---|--- 2026-08-19 17:46:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-72447
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP diagnostic SCTPDIAG endpoint dumping mechanism. A race condition occurs when address lists are traversed without holding the necessary socket lock, allowing concurrent modifications. A local attacker could exploit th...
CVE-2026-62581
creationtimestamp| type| source ---|---|--- 2026-08-19 17:45:48+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
[SECURITY] [DSA 6451-1] firefox-esr security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6451-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 19, 2026 https://www.debian.org/security/faq -...
CVE-2026-74532
A flaw was found in the Bluetooth btintel driver of the Linux kernel. The btinteldiagnostics function fails to validate the length of a diagnostics Vendor Specific Event VSE before accessing its data. This oversight allows an attacker to potentially read data beyond the intended memory boundary,...
CVE-2026-72444
A flaw was found in the Linux kernel's flowdissector component. When processing network packets on non-Ethernet devices, such as a TUN device in L3 mode, with specific traffic control filters, the flowdissector can attempt to read Ethernet header information that does not exist. This leads to the...
CVE-2026-74501
A flaw was found in the ALSA USB audio driver of the Linux kernel. A malicious USB MIDI 2.0 device can trigger a use-after-free vulnerability by causing a creation failure after an endpoint is registered. This can lead to a slab use-after-free read when the Universal MIDI Packet UMP node is...
CVE-2026-72351
A flaw was found in the Linux kernel's Generic UDP Encapsulation GUE implementation. A remote attacker could exploit a missing length validation for the remote checksum offload REMCSUM private option. By sending a specially crafted GUE packet, an attacker can cause the kernel to read beyond the...
CVE-2026-66794 Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route
A flaw was found in the cluster-proxy-addon component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manipulating URL path segments, the attacker can proxy...
EUVD-2026-62598
A flaw was found in the cluster-proxy-addon component of Multicluster Engine for Kubernetes. This vulnerability allows an unauthenticated attacker, who can access the user-facing route, to bypass authentication and authorization checks. By manipulating URL path segments, the attacker can proxy...
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...
glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...
