dotnet10.0: dotnet8.0: dotnet9.0: dotnet: .NET Information Disclosure Vulnerability

Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: dotnet8.0: dotnet9.0: dotnet10.0: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains a security vulnerability. This vulnerability stems from the net/sched actct module, which modifies shared unacknowledged CT entries when processing cloned skb objects with unacknowledged CT entries. This could lead to reuse after deallocation...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.7 contains a security vulnerability. This vulnerability arises from the actct in net/sched, which triggers a WARN when flowoffloadalloc returns NULL due to the disappearance of conntrack entries or a failure in GFPATOMIC allocation. This could allow non-privileged users...

Linux Kernel Security Vulnerabilities

Versions of the Linux kernel from 6.1.119 to 6.1.189, from 6.6.63 to 6.6.158, from 6.11.10 to 6.12, and version 6.12 contain security vulnerabilities. The vulnerability stems from inconsistent IDR key fields in the manual hashtable handles in net/sched clsu32. Hashtables created with an explicit...

Linux Kernel Security Vulnerabilities

The Linux kernel version 2.6.14 has a security vulnerability. This vulnerability stems from improper filtering of connection flags or their combinations in the IPVS SYNC protocol in the file net/netfilter/ipvs/ipvssync.c. The combination of NOCPORT and TEMPLATE may cause normal connection searche...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.18 contains a security vulnerability. This vulnerability stems from emmactxmemmap in drivers/net/ethernet/spacemit/k1emac.c, which fails to clear the written TX descriptors when fragment mapping fails. As a result, the DMA engine may access an old address that has been...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.18 contains a security vulnerability. This vulnerability arises from the incorrect invocation of the bonding-specific API when processing team device events by using net/mlx5. This leads to out-of-bound memory access to the slab structure...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from the meshpathadd function in net/mac80211/meshpathtbl.c, which does not release the reserved mesh path quotas when path allocation or insertion fails. This can lead to repeated failures or repeated...

CLSA-2026-1792242216 ruby: Fix of CVE-2026-42246

CVE-2026-42246: fix Net::IMAPstarttls returning success without TLS on a man-in-the-middle error response - CVE-2026-42258: fix IMAP command injection via Symbol arguments...

MGASA-2026-0511 Updated perl-Net-Whois-Raw package fixes a security vulnerability

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. CVE-2026-19954...

CVE-2026-85363

A flaw was found in .NET. An integer overflow issue allows an unauthenticated remote attacker to achieve privilege escalation over the network. By convincing a user to process specially crafted input, an attacker can cause a calculation error that leads to unauthorized access with elevated...

CVE-2026-83520

A flaw was found in .NET. An insecure deserialization vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution over a network. By convincing an application or user to process specially crafted serialized data, an attacker can execute malicious commands with the...

CVE-2026-70197

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code over the network. By sending specially crafted input to an affected application, an attacker can corrupt system memory and compromise the host environment...

CVE-2026-70035

A flaw was found in .NET. The vulnerability stems from insecure deserialization, where data transmitted over a network is reconstructed without adequate validation. A remote, unauthenticated attacker could exploit this issue by convincing a user to process specially crafted input. Successful...

CVE-2026-70190

A flaw was found in .NET. An authorized local attacker can exploit improper file link resolution before file access to achieve privilege escalation. By convincing a user to interact with a crafted file or link, the attacker can manipulate file paths to gain elevated privileges on the system...

CVE-2026-70161

A flaw was found in .NET. An authorized local attacker can achieve privilege escalation due to a path traversal vulnerability caused by improper file path restrictions. By manipulating file paths to access locations outside the intended directory, the attacker can gain elevated privileges on the...

CVE-2026-49868

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, parsereply in sys/net/applicationlayer/dhcpv6/client.c omits minimum-length validation before passing IAPD and IANA option bodies to sub-option parsers. A...

CVE-2026-49868 RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, parsereply in sys/net/applicationlayer/dhcpv6/client.c omits minimum-length validation before passing IAPD and IANA option bodies to sub-option parsers. A...