CVE-2026-31386

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege...

CVE-2026-31386

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege...

CVE-2026-31386

OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability. An arbitrary OS command may be executed by an attacker with the administrative privilege...

rtw89_set_sar_from_acpi Heap Buffer Overflow DoS

The vulnerability of the rtw89setsarfromacpi function in the drivers/net/wireless/realtek/rtw89/sar.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper locking of resources. Exploiting this vulnerability may allow an attacker to cause a service...

s390 kernel DoS

The vulnerability of the s390 kernel component of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux IIO Core Heap Buffer Overflow DoS

The vulnerability of the iiodebugfswritereg function in the drivers/iio/industrialio-core.c file of various types of embedded sensors in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Direct Rendering Infrastructure AMD GPU DoS

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI for AMD graphics cards in Linux operating systems is related to incorrect resource initialization. Exploiting this vulnerability can...

PT-2026-25954

Name of the Vulnerable Software and Affected Versions IBM Db2 Recovery Expert for Linux, UNIX and Windows version 5.5 IF 2 Description The software contains an insecure mechanism used for verifying data integrity during transmission, which could allow an attacker to modify or corrupt data...

EulerOS 2.0 SP10 : python-urllib3 (EulerOS-SA-2026-1348)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by...

PowerPC Linux Format Show DoS

The vulnerability of the formatshow function in the arch/powerpc/kernel/secvar-sysfs.c module of the PowerPC platform in Linux operating systems is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Realtek kernel Wireless DoS

The vulnerability of the rtw89coremlsrswitch function in the drivers/net/wireless/realtek/rtw89/core.c file of the Realtek wireless adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a system failure...

PT-2026-25612

Name of the Vulnerable Software and Affected Versions OpenLiteSpeed and LSWS Enterprise versions affected versions not specified Description OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection issue. An attacker with administrative privileges can...

ip22zilog DoS

The vulnerability of the ip22zilog component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-14287 Command Injection in mlflow/mlflow

A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the mlflow/sagemaker/init.py file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, whic...

GHSA-GC25-M8G6-JP4F vulnerabilities

Vulnerabilities for packages: chromium...

Moderate Photon OS Security Update - PHSA-2026-5.0-90-0785

Updates of 'vim' packages of Photon OS have been released...

Security Bulletin: Vulnerability in libxml2 (CVE-2025-8732) affects AIX/VIOS

Summary Updated Mar 13 2026: Added iFix information for VIOS 3.1. Vulnerability in libxml2 could cause an uncontrolled recursion CVE-2025-8732. AIX uses libxml2 as part of its XML parsing functions. Vulnerability Details CVEID:CVE-2025-8732 DESCRIPTION: A vulnerability was found in libxml2 up to...

CVE-2026-25817

HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization of special elements used in an OS command allowing remote code execution by attackers with low privilege access on the gateway,...

Apple Security Advisory 03-11-2026-1

Apple Security Advisory 03-11-2026-1 - iOS 16.7.15 and iPadOS 16.7.15 addresses memory corruption issues...

Windows Ancillary Function Driver WinSock Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...