62883 matches found
CVE-2026-71225
A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...
Linux Distros Unpatched Vulnerability : CVE-2026-71225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher...
PT-2026-70007
Уязвимость системы контроля защищённости PT MaxPatrol 10 связана с ошибками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, нарушить целостность и конфиденциальность защищаемых данных...
PT-2026-68129
Name of the Vulnerable Software and Affected Versions libkcapi affected versions not specified Description A flaw exists when performing one-shot symmetric cipher operations on inputs exceeding 64 KiB in stateful modes, specifically Counter CTR or Cipher Block Chaining CBC. The library improperly...
ROS-20260805-73-0016
The vulnerability of the xskdiagfill function in the net/xdp/xskdiag.c module, which implements networking functions for the Linux operating system’s kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Password component compromise Data Compromise
The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
MediaWiki Data Compromise
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to deficiencies in the system’s controlled areas. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
MediaWiki Data Compromise
The vulnerability of the software for implementing the hypertext environment MediaWiki is related to deficiencies in the system’s controlled areas. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...
CVE-2026-71225: Use of Insufficiently Random Values
A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...
CVE-2026-17583: Missing Support for Integrity Check
The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fsa/.hid output files can be edited. An attacker could tamper with these files, altering DNA data and resulting in inaccurate DNA test outcomes...
Directory Traversal
Overview ghost is a publishing platform Affected versions of this package are vulnerable to Directory Traversal in the database backup and export filename handling through the backup/export filename processing in the admin backend and exporter modules. An administrator-level attacker can overwrit...
CVE-2026-15157
A flaw was found in undici. An application that processes a hand-rolled blob-like request body with a type property derived from untrusted input may allow a remote attacker to inject Carriage Return Line Feed CRLF sequences. This vulnerability enables the attacker to append arbitrary HTTP headers...
SUSE-SU-2026:23164-1 Security update for runc
This update for runc fixes the following issues: - CVE-2026-41579: runc allows a malicious image with a /dev symlink to trigger limited host filesystem integrity violations bsc1268275. Changes for runc: - update to 1.3.6: Various integration test improvements. 5222, 5237, 5226, 5229, 5239, 5249,...
CLSA-2026-1779238044 TuxCare security update for webpack-subresource-integrity (1 CVE)
TuxCare rebuilt webpack-subresource-integrity to address 1 CVE. Fixed in 1.4.1-tuxcare.1...
CLSA-2026-1774225212 TuxCare security update for webpack-subresource-integrity (1 CVE)
TuxCare rebuilt webpack-subresource-integrity to address 1 CVE. Fixed in 1.4.0-tuxcare.1...
JLSEC-2026-1162
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If a file is corrupted such that an array datatype's size, the number of elements, and the element size are not in agreement it can trigger an out of bounds read. The array datatype stores the...
Thermo Fisher Applied Biosystems Genetic Analyzers
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to modify .fsa/.hid output files, tampering with DNA data and resulting in inaccurate test results. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...
ROS-20260804-73-0019
The vulnerability of the arch/parisc/kernel/syscall.S component in the Linux operating system is related to insufficient comparison. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...
FreeRDP http_proxy_connect() RCE
The vulnerability of the httpproxyconnect function in the RDP client FreeRDP is related to the lack of handling for CRLF sequences in HTTP headers when processing the variable ServerHostname. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...