60824 matches found
The vulnerability of the net_devmem_bind_dmabuf() function in the net/core/devmem.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the netdevmembinddmabuf function in the net/core/devmem.c module, which is part of Linux’s kernel-based networking functions, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the nvme_free_host_mem_multi() function in the driver/nvme/host/pci.c module of the Linux kernel’s NVME driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the nvmefreehostmemmulti function in the nvme/host/pci.c driver module of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
The vulnerability of the get_ext_report() function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getextreport function in the drivers/virt/coco/sev-guest/sev-guest.c module of the Linux kernel is related to improper boundary removal of critical data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rsyslog (UTSA-2026-106764)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106764 advisory. A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cau...
Unity Linux 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106785)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106785 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: nginx (UTSA-2026-106784)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106784 advisory. NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttprewritemodule module. This vulnerability exists when a rewrite directive uses a regex pattern wit...
PT-2026-88906
Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the authenticate method — registered on the rest authentication errors filter and therefore evaluated for every unauthenticated REST API...
CVE-2026-80923: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on ttyregisterdriver failure If ttyregisterdriver fails, it drops the reference, but fails to set the global dbcttydriver to NULL, causing the unregister to be called again when module exits. On modul...
PT-2026-88795
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49312: Undefined Security Weakness
Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-53581 ntp: write path traversal
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...
EUVD-2026-74293
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.420 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulatin...
CVE-2026-86084
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the public OIDC login and callback endpoints completed authentication even when OIDC was not the enabled active authentication method. An Enterprise administrator who had configured and later disabled an...
EUVD-2026-66397
NLTK: ReDoS in nltk.tgrep via unvalidated user-supplied regular expressions...
CVE-2026-85484
HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup, CheckboxGroup and HorizCheckboxGroup widgets render a group label unescaped, Select into a label attribute and the other three into element...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-85485
The HTML::FormHandler Perl module in versions before 0.410002 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the failure to properly escape certain error messages when rendered into HTML. Specifically, the Table form layout and the Bootstrap 2 and 3 wrappers splice error strings ...
Malicious code in punypump (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e56cc14096d20f679823bf15af9f44dff039e01f23d2082eba8020200d04a7f The package presents itself as a console shim index.js is a verbatim copy of console-browserify with description 'Emulate console for all the...
