62709 matches found
ALSA-2026:59496 Important: nginx:1.26 security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...
PT-2026-81898
Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2026-77139: Improper Limitation of a Pathname to a Restricted Directory
The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...
The vulnerability of the rxrpc_post_response() function in the net/rxrpc/conn_event.c module exposes session sockets supported by the RxRPC support in the Linux operating system, allowing a attacker to cause a service failure.
The vulnerability of the rxrpcpostresponse function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support in Linux kernel, is related to incorrect comparisons when using erroneous factors. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the rxgk_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to access protected information or cause service failures under Linux operating system kernels.
The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...
The vulnerability of the xfrm_policy_fini() function in the net/xfrm/xfrm_policy.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the rxrpc_preparse_xdr_yfs_rxgk() function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
The vulnerability of the efx_mcdi_rx_pull_rss_context_config() function in the drivers/net/ethernet/sfc/mcdiilters.c module of the Solarflare Ethernet network adapter driver for Linux kernel allows a attacker to cause a service failure.
The vulnerability of the efxmcdirxpullrsscontextconfig function in the drivers/net/ethernet/sfc/mcdiilters.c module of the Solarflare Ethernet network adapter driver for Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...
The vulnerabilities of the functions ftrace_dyn_arch_init_insns() and ftrace_make_call() in the arch/mips/kernel/ftrace.c module, which support the MIPS architecture of the Linux operating system, allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions ftracedynarchinitinsns and ftracemakecall in the arch/mips/kernel/ftrace.c module, which is part of the Linux operating system’s MIPS architecture support, stems from the execution of operations outside of memory buffers. Exploiting this vulnerability could allo...
The vulnerability of the esp_output_done() function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the espoutputdone function in the net/ipv4/esp4.c module of the IPv4 protocol implementation in the Linux operating system is related to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the simplify_symbols() function in the kernel/module/main.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the simplifysymbols function in the kernel/module/main.c module of the Linux operating system is related to the improper checking of the specified index, position, or offset in the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
RHEL 9 : nginx:1.26 (RHSA-2026:59496)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59496 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...
Remote Code Execution (RCE)
Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Remote Code Execution RCE in its external module loader, lib/resolver-compat.js makeResolverFromLegacyOptions,...
CVE-2026-72714
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking inside a module is expected to last only until the module ends, and the global flag is restored, but the universe graph keeps...
CVE-2026-71511
Dolibarr before 24.0.0 contains a sensitive data exposure vulnerability in the Members REST API that allows authenticated attackers with member-read rights to retrieve bcrypt password verifiers by querying member endpoints. Attackers can call the individual member or member list endpoints to obta...
CVE-2020-37268
Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module type. Applying a functor inlines the body of the parameter, and the inlining drops the record that the term was built...
CVE-2026-72714 Rocq Prover through 9.2.0 Universe Checking State Desynchronised After Module Close
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking inside a module is expected to last only until the module ends, and the global flag is restored, but the universe graph keeps...
CVE-2026-72714 Rocq Prover through 9.2.0 Universe Checking State Desynchronised After Module Close
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking inside a module is expected to last only until the module ends, and the global flag is restored, but the universe graph keeps...
EUVD-2026-65143
Rocq Prover does not restore the universe graph's copy of the universe checking flag when a module that locally disabled the check is closed. Local Unset Universe Checking inside a module is expected to last only until the module ends, and the global flag is restored, but the universe graph keeps...