The vulnerability of the `ocfs2_write_end_nolock()` function in the `fs/ocfs2/aops.c` file of the OCFS2 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ocfs2writeendnolock function in the fs/ocfs2/aops.c file of the OCFS2 file system in Linux operating systems is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

The vulnerability of the `tcp_bpf_sendmsg_redir()` function in the `net/ipv4/tcp_bpf.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpbpfsendmsgredir function in the net/ipv4/tcpbpf.c module of the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-33222

A flaw was found in NATS-Server, a high-performance messaging system. This vulnerability allows users with JetStream admin API access to restore data from one stream to unintended stream names. This can lead to unauthorized modification or overwriting of data that should have been protected,...

CVE-2026-33246

A flaw was found in NATS-Server. A remote attacker, by connecting a leafnode to a NATS-Server, could propagate unchecked identity claims through the Nats-Request-Info: message header. This vulnerability allows for the spoofing of client identities, potentially leading to NATS clients making...

GHSA-8G29-8XWR-QMHR @grackle-ai/server JSON.parse lacks try-catch logic in its gRPC Service AdapterConfig Handling

Impact JSON.parseenv.adapterConfig is called without error handling in three locations within the gRPC service. While the data originates from the server's own SQLite database and should always be valid JSON, database corruption, migration errors, or unexpected state could cause an unhandled...

CVE-2026-20104

A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE3500 and IE3505 Rugged Series Switches could allow an authenticated, local...

Cisco IOS XE Software for Cisco Catalyst and Rugged Series Switches Secure Boot Bypass Vulnerability

A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series Switches, and Cisco IE3500 and IE3505 Rugged Series Switches could allow an authenticated, local...

kernel: RDMA/rxe: Fix incomplete state save in rxe_requester

An incorrect state restoration flaw was found in the Linux kernel's RDMA rxe soft-RoCE driver in the requester packet transmission logic. A local user with access to RDMA devices can trigger this issue when network layer packet drops occur during RDMA send operations, causing the work queue eleme...

Cisco IOS XE Software for Catalyst Rugged Series Switches Secure Boot Bypass (cisco-sa-xe-secureboot-bypass-B6uYxYSZ)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9310 and IE9320 Rugged Series...

The vulnerability of the be_cmd_read_port_transceiver_data() function in the drivers/net/ethernet/emulex/benet/be_cmds.c module of the Linux kernel’s Ethernet adapter support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the becmdreadporttransceiverdata function in the drivers/net/ethernet/emulex/benet/becmds.c file, a driver for supporting Ethernet network adapters in the Linux operating system, stems from the copying of buffers without checking the size of the input data a classic buffer...

The vulnerability of the dm_integrity_ctr() function in the drivers/md/dm-integrity.c file of the support for multiple devices (RAID and LVM) in the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmintegrityctr function in the drivers/md/dm-integrity.c file of the support for multiple devices RAID and LVM in the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromis...

The vulnerability of the ocelot_stats_deinit() function in the drivers/net/ethernet/mscc/ocelot_stats.c module of the Microsemi network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ocelotstatsdeinit function in the drivers/net/ethernet/mscc/ocelotstats.c module of the Microsemi network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the loop_queue_rq() function in the drivers/block/loop.c module of the Linux kernel’s block devices driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loopqueuerq function in the drivers/block/loop.c module of the Linux kernel’s block devices driver is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the WebGL component in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome and Microsoft Edge browsers’ WebGL component relates to reading data beyond the permitted range in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a...

The vulnerability in the `float_to_int()` function of the drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c file of the Linux kernel subsystem for user interface devices’ driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the floattoint function in the drivers/hid/amd-sfh-hid/sfh11/amdsfhdesc.c file of the Linux kernel subsystem for user interface devices’ driver lies in the handling of buffer overflows. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the lookup_rec() function in the kernel/trace/ftrace.c module, which supports Linux operating system tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the lookuprec function in the kernel/trace/ftrace.c module, which supports kernel tracing in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the permitted range of memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a special...

The vulnerability of the cp2112_xfer() function in the drivers/hid/hid-cp2112.c driver module of the Linux kernel’s input device subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cp2112xfer function in the drivers/hid/hid-cp2112.c driver of the Linux kernel’s input device subsystem relates to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

MGASA-2026-0066 Updated trilead-ssh2 packages fix security vulnerabilities

CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack...

CVE-2026-27654

NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer overflow to the NGINX worker process; this vulnerability may result in termination of the NGINX worker process or modification of source or destination file names...