28596 matches found
EUVD-2026-70345
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drmlogdrawkmsgrecord accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINTMAX, causing an out-of-bounds read...
CVE-2026-80741 drm/log: Fix out-of-bounds read on empty message length
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drmlogdrawkmsgrecord accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINTMAX, causing an out-of-bounds read...
CVE-2026-80741
CVE-2026-80741 is an out-of-bounds read in the Linux kernel's DRM logging subsystem (drm/log). The function drm_log_draw_kmsg_record() accesses s[len - 1] to strip a trailing newline, but since len is an unsigned int , a value of zero causes the subtraction to wrap to UINT_MAX, reading far beyond...
EUVD-2026-70344
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...
CVE-2026-80740 drm/log: Fix infinite loop when scale is too large for display
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...
CVE-2026-80740 drm/log: Fix infinite loop when scale is too large for display
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...
CVE-2026-80740
CVE-2026-80740 affects the Linux kernel in the drm/log subsystem. When the display scale is large enough that the scaled font exceeds the display dimensions, either the rows or columns variable becomes zero. A zero column count causes an infinite loop in drm_log_draw_kmsg_record() because the loo...
CVE-2026-9852
CVE-2026-9852 is a CSV injection vulnerability in Hitachi Energy SYS600 , affecting the Notify service log export function on Windows. Injected malicious formulas in log data can modify spreadsheet data, insert links, exfiltrate data , and in some configurations execute malicious code on the user...
CVE-2026-9852
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...
CVE-2026-9852
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...
CVE-2026-9852: Improper Neutralization of Formula Elements in a CSV File
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...
CVE-2026-80741: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drmlogdrawkmsgrecord accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINTMAX, causing an out-of-bounds read...
PT-2026-84916
A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, insert links, exfiltrate data, and in some cases, depending on how the user has their environment configured, execute malicious code on the user’s machine. To exploit this issue...
PT-2026-84939
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message length drm log draw kmsg record accesses slen - 1 to strip the trailing newline, but len is unsigned int. If len is 0, the subtraction wraps to UINT MAX, causing an out-of-bounds...
PT-2026-84938
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaled font exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in drm log draw kms...
CVE-2026-9736: Improper Output Neutralization for Logs
IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
Linux Distros Unpatched Vulnerability : CVE-2026-59272
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of...
RHEL 7 : kernel-rt (RHSA-2026:63189)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:63189 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...
CVE-2026-80740: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when scale is too large for display When scale is large enough that scaledfont exceeds the display dimensions, rows or columns become 0. A columns value of 0 causes an infinite loop in...
CVE-2026-85174: Insertion of Sensitive Information into Log File
SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access...