7758 matches found
UBUNTU-CVE-2026-54552
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
CVE-2026-54552
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
CVE-2026-54552
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
WordPress Quiz and Survey Master (QSM) plugin <= 11.2.1 - Authenticated (Contributor+) SQL Injection via 'randon_category' Quiz Option vulnerability
Authenticated Contributor+ SQL Injection via 'randoncategory' Quiz Option vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Quiz And Survey Master versions = 11.2.1...
SUSE CVE-2026-53795
rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
SUSE CVE-2026-72712
Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option. The malformed packet forces the Packet:parseoptions function in nselib/packet.lua to allocate...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100304)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100304 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xttcpmss: check remaining length before reading optlen Quoting reporter: In...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100105)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100105 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100739)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100739 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkosf: fix out-of-bounds read on option matching In nfosfmatch, the nfosfhdrctx...
ALSA-2026:55841 Important: unbound security update
The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 unbound: Unbound: Denial of Service via malformed EDNS Report-Channel opti...
EUVD-2026-59757
@fastify/jwt is a JSON Web Token plugin for Fastify. In versions before 10.2.2, a per-request verification key passed to request.jwtVerify key is silently overridden by the plugin's globally configured secret, because the option merge applies the global key last. Applications that use different...
CVE-2026-74308
In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...
UBUNTU-CVE-2026-74308
In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4writeinlinedataend When the data=journal mount option is used, the ext4journalledwriteend function incorrectly calls ext4writeinlinedataend without checking if the EXT4STATEMAYINLINEDATA flag is still...
CVE-2026-72104
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...
CVE-2026-72104
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...