988996 matches found
CVE-2026-102821
A flaw was found in russh. An authenticated remote attacker can cause a Denial of Service DoS by initiating a Secure Shell SSH key renegotiation without completing it and flooding the server with channel open requests. Because the server continues buffering incoming requests without draining the...
MGASA-2026-0462 Updated fuse-overlayfs package fixes security vulnerabilities
fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/openOTRUNC. CVE-2026-52791 Operations on hardlinked lower-layer files resolving to the wrong layer. CVE-2026-77478...
CVE-2026-97914
A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When scheduler initialization fails during a job open operation, the driver returns an incorrect positive status code instead of a standard negative error number. A local user can trigger this issue by opening an accelerator j...
CVE-2026-97612
A flaw was found in the Linux kernel's Multiprotocol Label Switching MPLS networking subsystem. When all labels are removed from an encapsulated packet, the kernel fails to clear internal protocol tracking metadata, leaving stale network header references. An attacker could exploit this flaw by...
CVE-2026-97611
A flaw was found in the Linux kernel's Open vSwitch subsystem. A race condition during the reallocation of internal flow table structures allows memory to be freed while it is still being accessed by packet processing routines, causing a use-after-free condition. An attacker can exploit this flaw...
CVE-2026-77177
Open GenAI Stack aka ogx-ai 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection with Jinja2 template syntax can be used to achieve server-side expression evaluation without sanitization...
CVE-2026-73599
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-73599
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-73599
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
EUVD-2026-88755
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
BIT-ENVOY-2026-73552 Envoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy HTTP RBAC accepts RFC-valid opaque header bytes but evaluates saferegex values with RE2's UTF-8 subject semantics. A downstream client can preserve a prohibit...
CLEANSTART-2026-JK79354 Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect
Security vulnerability affects the apache-hive package. A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect...
CLEANSTART-2026-FB75379 UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns
Security vulnerability affects the apache-hive package. UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns...
CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5
Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...
CVE-2024-31027
Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...
CVE-2026-73599: URL Redirection to Untrusted Site
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
PT-2026-102526
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
PT-2026-102941
Name of the Vulnerable Software and Affected Versions Mediawiki - Collection extension versions prior to 1.46.1 Mediawiki - Collection extension version 1.45.5 Mediawiki - Collection extension version 1.43.10 Description An open redirect issue exists in the Mediawiki - Collection extension, which...
CVE-2026-77177
Open GenAI Stack aka ogx-ai 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection with Jinja2 template syntax can be used to achieve server-side expression evaluation without sanitization...
PT-2026-102889
Found a High issue in dbt Core v2 alphas - CVE-2026-100406. : dbt docs serve had an open query endpoint with no login. If that server was reachable, local files like creds and keys could leak. Fixed in 2.0.0-alpha.5. Upgrade and keep docs serve local. https://t.co/o5ISFpV6cb...