4757 matches found
CVE-2026-73070
A flaw was found in Vim. The socket server backend accepts an unbounded number of client connections, causing file descriptors to overflow internal data structures. A local process able to connect to the server socket can exploit this to corrupt stack memory or terminate the Vim server. This can...
GHSA-VX5Q-9X62-9QQG vulnerabilities
Vulnerabilities for packages: linux-gcp...
GHSA-49P8-H7PF-GRWP vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-64294 vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-64260 vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-64262 vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-64256 vulnerabilities
Vulnerabilities for packages: linux-gcp...
CVE-2026-19113 vulnerabilities
Vulnerabilities for packages: consul-fips...
CVE-2026-19770 feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery
A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The...
SUSE CVE-2026-73070
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
Linux Distros Unpatched Vulnerability : CVE-2026-50626
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-6387
A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-63423
During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privileges...
CVE-2026-12036
The CVE-2026-12036 entry concerns the VantageCoreAddin component used by Lenovo Vantage and Lenovo Commercial Vantage. Description: an improper link following vulnerability could allow a local authenticated user to perform arbitrary file deletion with elevated privileges. The CVSS metrics indicat...
CVE-2026-70462
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...
CVE-2026-53801
rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree. Attackers who can create or manipulate symlinks in a path component of...
UBUNTU-CVE-2026-73585
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during scri...
CVE-2026-73585
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during scri...