232690 matches found
CVE-2026-46987
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Application Service Level Mgmt. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to...
CVE-2026-63885
A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Execution Manager GEM component. A race condition, a situation where multiple operations occur in an unpredictable order, exists between the changehandle and handledelete operations. This can allow a local attacker to fr...
UBUNTU-CVE-2026-12547
SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority host:port. When the proxy configuration changes e.g., via system settings or WPAD, cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials...
CVE-2026-63863
A flaw was found in the Linux kernel's Direct Rendering Manager DRM Graphics Processing Unit Shared Virtual Memory gpusvm component. This vulnerability is caused by an unbalanced lock and unlock operation, which can lead to system instability. An attacker could potentially exploit this to trigger...
CVE-2026-12547 Libsoup: information disclosure in libsoup via soupauthmanager proxy credential leak on proxy switch
SoupAuthManager caches proxy authentication credentials without scoping them to the proxy authority host:port. When the proxy configuration changes e.g., via system settings or WPAD, cached Proxy-Authorization headers from the previous proxy are sent to the new proxy, leaking credentials...
kernel: drm: Set old handle to NULL before prime swap in change_handle
A flaw was found in the Linux kernel. A race condition in the Direct Rendering Manager DRM subsystem's changehandle function could allow a local attacker to trigger a use-after-free vulnerability. This occurs when a concurrent gemclose operation removes one handle while another remains dangling...
MAL-2026-10984 Malicious code in veskra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f85333fa48c61a31c9f7be395bdc5ef70596e317a3bc9124f67ece4ffcf96901 [email protected] contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetching remote content, no...
MAL-2026-10980 Malicious code in nolby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8bc0fa5eb23a45d27933ce1d32b7fabed27182039e170dbcaa38c0462dfa20 The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invokes a top-level sync on modu...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, gitlab-rails-ce-fips, kibana, actions-runner, saf, wazuh-dashboard, opensearch-dashboards-fips, pulumi, gitlab-rails-ce, wazuh-dashboard-fips, lerna, kubeflow-centraldashboard, homepage, opensearch-dashboards, sqlpad, graalvm...
GHSA-W8WR-V893-VJVP vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, gitlab-rails-ce-fips, kibana, actions-runner, saf, wazuh-dashboard, opensearch-dashboards-fips, pulumi, gitlab-rails-ce, wazuh-dashboard-fips, lerna, kubeflow-centraldashboard, homepage, opensearch-dashboards, sqlpad, graalvm...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, gitlab-rails-ce-fips, kibana, actions-runner, saf, wazuh-dashboard, opensearch-dashboards-fips, pulumi, gitlab-rails-ce, wazuh-dashboard-fips, lerna, kubeflow-centraldashboard, opensearch-dashboards, sqlpad, graalvm...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: prism, npm, code-server, gitlab-rails-ce-fips, kibana, actions-runner, saf, wazuh-dashboard, opensearch-dashboards-fips, pulumi, gitlab-rails-ce, wazuh-dashboard-fips, lerna, kubeflow-centraldashboard, homepage, opensearch-dashboards, sqlpad, graalvm...
GHSA-8X88-C5MF-7J5W vulnerabilities
Vulnerabilities for packages: npm, prism, kubeflow-centraldashboard, lerna, saf, code-server, pulumi, sqlpad...
GHSA-GVWX-54WH-QM9J vulnerabilities
Vulnerabilities for packages: npm, prism, kubeflow-centraldashboard, lerna, saf, code-server, pulumi, sqlpad...
GHSA-23HP-3JRH-7FPW vulnerabilities
Vulnerabilities for packages: npm, prism, kubeflow-centraldashboard, lerna, saf, code-server, pulumi, sqlpad...
CVE-2026-16445 Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
EUVD-2026-46253
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
CVE-2026-16445
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
CVE-2026-16409
Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
New ClickLock Stealer locks your Mac until you hand over your password
ClickLock Stealer is a new, modular macOS infostealer delivered via ClickFix-style phishing pages that can lock a victim’s Mac, steal their macOS password, browser and password manager data, cryptocurrency wallets, and then leave behind a persistent backdoor. The malware was discovered by Group-I...