23352 matches found
EUVD-2026-58978
In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ipvsseq structs in ipvsconnnew Commit 9a05475cebdd "ipvs: avoid kmemcachezalloc in ipvsconnnew" changed ipvsconnnew to allocate an ipvsconn object with kmemcachealloc. The function then initializes many fields...
PT-2026-72209
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip vs conn new function where ip vs conn objects allocated via kmem cache alloc do not have their init seq and previous delta fields within the ip vs seq structure...
PT-2026-72837
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Distributed Lock Manager DLM where message handles in the node-send queue may not be ordered by the oldest sequence number during high-request benchmark scenarios...
PT-2026-72227
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A resource leak occurs in the liquidio network driver. When the cn23xx get pf num function fails, the system returns from the error path without unmapping the Base Address Registers BAR,...
openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...
nanoid: nanoid: Predictable ID generation due to integer overflow
A flaw was found in nanoid, a JavaScript library for generating unique string IDs. A remote attacker could exploit an integer overflow vulnerability by providing a specific input to the nanoidsize function. This issue causes the internal random number generator to become predictable, leading to t...
CVE-2026-48494 TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global `wa-preview-{phone}` session ids
TypeBot is a chatbot builder tool. In version 3.16.1, an authenticated user who has read access to any typebot can resume a WhatsApp preview webhook session that belongs to a different typebot by mixing an authorized typebotId and blockId and a foreign preview phone number tied to another preview...
OPENSUSE-SU-2026:21563-1 Security update for librest0_7
This update for librest07 fixes the following issues: Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44...
CVE-2026-68329
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommucompletionwait needsync is a per-IOMMU flag shared by all domains and devices behind that IOMMU. It is set whenever a command is queued with sync == true and clear...
CVE-2026-68329
CVE-2026-68329 affects the Linux kernel’s iommu/amd path. A race in iommu_completion_wait() can cause it to return before all previously queued commands complete, enabling a use-after-free window where stale page-table translations may be used. The issue stems from need_sync being read locklessly...
CVE-2026-68230
CVE-2026-68230 affects the Linux kernel media: amlogic-c3 driver. The vulnerability stems from improper validation of AWB/AE configuration, failing to ensure zones_num does not exceed allocated memory for zone weights, leading to potential invalid memory access and buffer overflow. Multiple sourc...
CVE-2026-18401
A flaw was found in jackson-core. The non-blocking asynchronous JSON parser does not properly enforce the maximum number length constraint. A remote attacker can exploit this by submitting a specially crafted JSON document containing an arbitrarily long number to an application using the...
CVE-2026-66486
creationtimestamp| type| source ---|---|--- 2026-08-10 10:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edsgdcj66b3ei 2026-08-10 12:15:14+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-66484 2026-08-15 00:10:28+00:00| seen|...
RHSA-2026:52649 Red Hat Security Advisory: kernel security update
Bulletin has no description...
CVE-2026-65502
creationtimestamp| type| source ---|---|--- 2026-08-10 03:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msp557n4lz2y 2026-08-10 23:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msra6zpguh2o...
ECHO-A10B-DD74-A1AF
Bulletin has no description...
MINI-8GWW-WRPC-GWV5
Bulletin has no description...
CVE-2026-48097
creationtimestamp| type| source ---|---|--- 2026-08-08 07:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirptsnh23...
CVE-2026-71851
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random, instead of a cryptographically secure source...