129635 matches found
EUVD-2026-33269
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device...
CVE-2026-49199 Predator Connect W6x: RCE via MQTT
Crafted MQTT messages can trigger command injection, resulting in root-level code execution on the target device...
xfrm: ah: account for ESN high bits in async callbacks
...
sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
...
batman-adv: stop caching unowned originator pointers in BAT IV
...
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
...
ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()
...
EUVD-2026-33260
A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network...
CVE-2026-10052
A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network...
[SECURITY] Fedora 43 Update: perl-Sereal-Decoder-5.005-1.fc43
This library implements a deserializer for an efficient, compact-output, and feature-rich binary protocol called Sereal...
[SECURITY] Fedora 43 Update: perl-Sereal-Encoder-5.005-1.fc43
This library implements an efficient, compact-output, and feature-rich serializer using a binary protocol called Sereal...
SUSE CVE-2026-46185
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlinkdata Since smb2checkmessage returns success without length validation for the symlink error response, in symlinkdata it is possible for iov-iovlen to be smaller than sizeofstruct...
SUSE CVE-2026-46227
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctpsendmsgtoasoc in SCTPSENDALL The SCTPSENDALL path in sctpsendmsg iterates ep-asocs with listforeachentrysafe, which caches the next entry in @tmp before the loop body runs. The body calls...
[SECURITY] Fedora 44 Update: perl-Sereal-Decoder-5.005-1.fc44
This library implements a deserializer for an efficient, compact-output, and feature-rich binary protocol called Sereal...
[SECURITY] Fedora 44 Update: perl-Sereal-Encoder-5.005-1.fc44
This library implements an efficient, compact-output, and feature-rich serializer using a binary protocol called Sereal...
EUVD-2026-33066
Lakeside SysTrack Agent versions prior to 11.2.1.28, 11.3.0.38, 11.4.0.24, 11.5.0.15 contain an out-of-bounds read vulnerability in the Command ID 30 UDP packet handler that allows remote attackers to crash the application by sending a specially crafted UDP packet. Attackers can send a malformed...
StrongSwan security vulnerabilities
strongSwan is an open-source VPN solution based on IPsec, developed by Andreas Steffen of Switzerland. This solution includes X.509 public key certificates, secure storage of private keys, and authentication mechanisms such as smart cards. strongSwan has security vulnerabilities, which stem from...
n8n-MCP 安全漏洞
n8n-MCP is a model context protocol server developed by Romuald Członkowski, an individual developer. Versions of n8n-MCP prior to 2.51.3 contained security vulnerabilities. These vulnerabilities stemmed from the fact that the workflow telemetry cleaner might retain fragments of URL shape node...
ROS-20260529-73-0004
The vulnerability of the GNOME Remote Desktop remote desktop service is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures through a specially created RDP packet...
Remote Spark SparkView 安全漏洞
Remote Spark SparkView is a browser-based client software developed by Remote Spark, enabling remote desktop and terminal access. Versions of Remote Spark SparkView prior to build 1127 contained security vulnerabilities. These vulnerabilities stemmed from path traversal in RDP driver redirection,...