11288 matches found
CVE-2026-114082
Versions of Trigger.dev before 4.6.2 are susceptible to an authorization vulnerability involving overly broad realtime session stream credentials . Public-token holders with session write access can obtain environment-wide S2 stream credentials through session input initialization. This allows an...
CVE-2026-114082 Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via session input initialization. Attackers can use the credential directly against the storage API to append, create, or tr...
CVE-2026-114082 Trigger.dev before 4.6.2 Overly Broad Realtime Session Stream Credentials
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via session input initialization. Attackers can use the credential directly against the storage API to append, create, or tr...
PT-2026-120208
Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via session input initialization. Attackers can use the credential directly against the storage API to append, create, or tr...
GHSA-QW47-MCM5-934W A2A Java SDK has a fail-open default task authorization
Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships. --- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common...
A2A Java SDK has a fail-open default task authorization
Draft text for GHSA-qw47-mcm5-934w. The body below drops into the GitHub advisory description field; the metadata block maps to the form fields. Set the patched version at release; publish when the fix ships. --- - Ecosystem: Maven - Affected package: org.a2aproject.sdk:a2a-java-sdk-server-common...
CVE-2026-113711
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke bigUploadMiddleware without an early authorize callback, allowing unauthenticated requests to perform upload initialization, chunk storag...
CVE-2026-113711
ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke bigUploadMiddleware without an early authorize callback, allowing unauthenticated requests to perform upload initialization, chunk storag...
CVE-2026-93230
A flaw was found in the Linux kernel. This issue may allow a local user to cause a Denial of Service DoS due to an improper initialization sequence in the HugeTLB Huge Translation Lookaside Buffer memory subsystem. During system startup, gigantic huge page memory structures can be inspected befor...
CVE-2026-93227
A flaw was found in the Linux kernel. This vulnerability allows a local user with control over boot parameters, or systems with specific memory alignments, to cause a Denial of Service DoS through a kernel panic. During early system boot with deferred memory initialization enabled, improper...
ROS-20261020-73-0062
The vulnerability in freerdp3 is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-118589
Name of the Vulnerable Software and Affected Versions ApostropheCMS versions prior to 4.33.0 import-export module versions prior to 3.7.0 Description Import routes invoke bigUploadMiddleware without an early authorize callback. This allows unauthenticated requests to perform upload initialization...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46136)
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix a potential clc buffer length underflow The buflen is used to limit the iterations for retrieving the country power setting and may underflow under certain conditions due to changes in the power table in...
CVE-2026-98540
A flaw was found in the Linux kernel's function probe fprobe tracing component. This vulnerability can result in a Denial of Service DoS due to improper memory initialization. When tracing kernel functions, unused shadow stack space is left uncleared, causing return routines to parse leftover dat...
CLSA-2024-1720468480 kernel: Fix of 101 CVEs
kvm: initialize all of the kvmdebugregs structure before sending it to userspace CVE-2023-1513 - wifi: mac80211: fix MBSSID parsing use-after-free CVE-2022-42719 - mac80211: always allocate struct ieee80211elems CVE-2022-42719 - netfilter: nftables: initialize registers in nftdochain...
CVE-2026-98438
A flaw was found in the Linux kernel's Multipath TCP MPTCP subsystem. When handling connection termination DATAFIN packets without payload data while checksum negotiation is enabled, the kernel fails to properly initialize memory before computing the packet checksum. A network peer could trigger...
CVE-2026-98674
In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initialize the mutex before registering the backend...
CLSA-2023-1683146027 kernel: Fix of 24 CVEs
media: rc: Fix use-after-free bugs caused by enetxirqsim CVE-2023-1118 - net: mpls: fix stale pointer if allocation fails during device rename CVE-2023-26545 - net/ulp: prevent ULP without clone op from entering the LISTEN status CVE-2023-0461 - Bluetooth: L2CAP: Fix u8 overflow CVE-2022-45934 -...
Linux Distros Unpatched Vulnerability : CVE-2026-98674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st-lock, but probe does not initialize it. Initializ...