CVE-2017-13208-Scanner

CVE-2017-13208-Scanner https://nvd.nist.gov/vuln/detail/CVE-2017-13208 Introducción Este es un script simple capaz de detectar la vulnerabilidad CVE-2017-13208 en archivos libnetutils.so de Android. Cómo funciona Usando r2pipe, el script verifica si el valor de dhcpsize es verificado; si no lo es...

CVE-2026-93160

CVE-2026-93160 affects the atmel-ecc crypto driver in the Linux kernel . The hardware ECDH path in atmel_ecdh_compute_shared_secret() could use a private key stored in the device that was not generated for the current tfm , because the function lacked the public-key-cache check already present in...

EUVD-2026-82268

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmelecdhcomputesharedsecret uses the private key stored in the device. However, the public key is cached only after atmelecdhsetsecret...

CVE-2026-93160 crypto: atmel-ecc - reject hardware ECDH without a public key

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-ecc - reject hardware ECDH without a public key The hardware ECDH path in atmelecdhcomputesharedsecret uses the private key stored in the device. However, the public key is cached only after atmelecdhsetsecret...

EUVD-2026-81856

In the Linux kernel, the following vulnerability has been resolved: btrfs: check if root is readonly when setting posix acl For a filesystem which has btrfs read-only property set to true, all write operations including acl and xattr should be denied. However, acl can still be set even if btrfs r...

EUVD-2026-81739

In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into devxdpinstall bpfxdplinkupdate calls devxdpinstall directly and skips devxdpattach, so the checks in devxdpattach do not run. A user can make an XDP link with a normal program and then swap in an...

CVE-2026-89973

CVE-2026-89973 affects the nvme-tcp driver in the Linux kernel. The function nvme_tcp_handle_c2h_data() validates a C2HData PDU's command ID and payload presence but does not check the data direction . A malicious or buggy NVMe controller can trigger a kernel warning (WARN_ON_ONCE in _copy_to_ite...

CVE-2026-56970

CVE-2026-56970 is a permission bypass vulnerability in Android (Pixel) devices, caused by a missing permission check in multiple locations. It enables local escalation of privilege with no additional execution privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with impa...

CVE-2026-54076

ArcadeDB (Multi-Model DBMS) versions prior to 26.6.1 suffer from an incomplete authorization fix for CVE-2026-44221. The UPDATE_SCHEMA permission check was added only to LocalDocumentType.createProperty, leaving other public schema mutators in LocalDocumentType.java and LocalProperty.java unprote...

CVE-2026-82519 Really Simple Security < 9.8.2 Authorization Bypass via profile-page update handler

Really Simple Security plugin for WordPress before 9.8.2 contains a missing authorization check vulnerability that allows authenticated low-privileged attackers to bypass enforced two-factor authentication indefinitely by exploiting an unguarded code path in the profile-page update handler...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, a missing check in the MNG encoder allowed the possibility of reading more images than the list limit allowed, resulting in excessive resource usage. This issue...

CVE-2026-45056

A flaw was found in matrix-sdk-crypto. This component, responsible for handling end-to-end encryption in Matrix clients, was missing a user ID check during the decryption of Olm-encrypted events that contained the senderdevicekeys property. An attacker, in collusion with the homeserver operator,...

CVE-2026-77752 Temporary Login Without Password 1.5 - 1.9.8 - Multisite Subsite Admin+ Network Super Admin Privilege Escalation

The Temporary Login Without Password WordPress plugin before 1.9.9 does not verify that the user requesting a temporary login holds network super admin rights before granting the new account those rights, allowing an administrator of a single site on a multisite network to take over the whole...

CVE-2026-89745

This Linux kernel vulnerability affects the debugfs subsystem. A prior commit changed relayfs from using the mmap file operation to mmap_prepare, but the corresponding lockdown check in debugfs was not updated. As a result, when the kernel is in integrity mode , debugfs fails to lock down files t...

CVE-2026-45762 Suricata defrag: missing address-family check can lead to remote crash

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

CVE-2026-86500

In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Admin...

CVE-2026-86500

In JetBrains YouTrack versions prior to 2026.1.14047 , a missing escalation check allowed a user with project update permissions to grant themselves Project Admin rights, effectively elevating their access beyond the intended permission level. The underlying cause is the absence of a proper check...

CVE-2026-18453

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...

UBUNTU-CVE-2026-18453

A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...