CVE-2026-32822

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, any unauthenticated attacker can place arbitrary HTML into flash...

EUVD-2026-45977

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Bifra Engineering Consulting Ltd. Q-smart NexT Poll allows Stored XSS. This issue affects Q-smart NexT Poll: before 1.8.7...

CVE-2026-63794

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM module, specifically within the Secure Virtual Machine SVM component. The sevdbgcrypt function, when handling encryption, incorrectly calculates the transfer length, leading to a page overflow. This memory corruption can resu...

CVE-2026-64181

A flaw was found in the Linux kernel's memory management subsystem. On 32-bit x86 systems with Transparent Huge Pages THP enabled, a missing feature for handling special page table entries can lead to incorrect tracking of memory resources. This can result in system warnings, errors related to...

CVE-2026-53372

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. This vulnerability arises in virtualized environments when a nested domain attempts to attach to a Process Address Space ID PASID, a mechanism for devices to access memory, while its parent domain is...

KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path

...

fuse: re-lock request before replacing page cache folio

...

K000162336: PHP vulnerability CVE-2026-6735

Security Advisory Description In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machi...

PT-2026-61742

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.0 Description An incomplete fix in the execAsync function allows command substitution using backticks or the $ syntax. This occurs because escaped commands are re-wrapped in double-quoted sh -c calls. An attacker ca...

Linux Distros Unpatched Vulnerability : CVE-2026-63807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shado...

Linux Distros Unpatched Vulnerability : CVE-2026-64104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When setmemoryencrypted,decrypted...

WordPress 5.6+ SkelerSecurity Core Security Plugin REST Batch API Mitigation

This WordPress plugin provides a temporary mitigation for the REST Batch API vulnerability chain commonly referred to as "wp2shell." It requires authentication before requests to the /wp-json/batch/v1 and ?restroute=/batch/v1 endpoints are processed, preventing unauthenticated exploitation of the...

httpd security, bug fix, and enhancement update

2.4.62-13.0.1.el98.5 - Replace index.html with Oracle's index page oracleindex.html. 2.4.62-13.5 - Resolves: RHEL-192752 - modproxyhtml regression in CVE-2026-34355 fix 2.4.62-13.4 - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers...

ROS-20260720-73-0021

The vulnerability of the FedCM component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

Linux Distros Unpatched Vulnerability : CVE-2026-63937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READONCE when reading entries/indices from PSC buffer Use READONCE when readin...

Medium: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page cache corruption CVE-2026-46331 Affected Packages: kernel6.12 Issue Correction: Run dnf update kernel6.12 --releasever 2023.12.20260720 or dnf update --advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-64124

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length netdevmembinddmabu...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mm/pagealloc: clear page-private in freepagesprepare CVE-2026-43303 In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks CVE-2026-45850 In the Linux...

Linux Distros Unpatched Vulnerability : CVE-2026-63813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Revert f2fs: remove non-uptodate folio from the page cache in movedatablock This reverts...

Linux Distros Unpatched Vulnerability : CVE-2026-63953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/migratedevice: fix pgtable leak in migratevmainserthugepmdpage When...