GO-2024-3205 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter, fq...

GO-2025-4272 vulnerabilities

Vulnerabilities for packages: temporal...

GO-2026-4865 vulnerabilities

Vulnerabilities for packages: dbmate, otel-cli, gitsign, trivy, osv-scanner, keda, terraform-provider-azapi, k3s, polaris, newrelic-infrastructure-agent, prometheus-adapter, prometheus, sftpgo-plugin-eventsearch, x509-certificate-exporter, ingress-nginx-controller, rclone, pulumi-language-java,...

Security Bulletin: IBM Engineering Test Management product using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by uncontrolled resource consumption and denial of service CVE-2026-50645, CVE-2026-9322, CVE-2026-9171. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...

crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

A flaw was found in the crypto/tls package, part of golang. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service DoS...

PT-2026-72129

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw exists when the SECURITY SCANNER V4 PSK pre-shared key is not configured. A remote unauthenticated attacker can send POST requests to the security scanner notification endpoint,...

The vulnerability of the rpmsg/rpmsg_core.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rpmsg/rpmsgcore.c component in the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to insufficient checking of the status of shared resources, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checks on the status of resources that are shared among users. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the driver/leds/led-class.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/leds/led-class.c component of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ipv4/fou_nl.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ipv4/founl.c component in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the component vmw_vsock/virtio_transport_common.c in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vmwvsock/virtiotransportcommon.c component in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

PT-2026-71982

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description A missing authorization issue exists in the '/api/ref/refreshBacklink' endpoint. This allows anonymous readers to trigger persistent server-side writes by invoking the endpoint with a controlled block...

Security Updates for Azure CycleCloud < 8.9.1

The Azure CycleCloud product is missing a security update. It is, therefore, affected by the following vulnerabilities: - Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network. CVE-2026-57969 - An improper input...

The vulnerability in the wireless/wext-core.c component of the Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the hyperv.netvsc_drv.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the hyperv.netvscdrv.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the slimbus/core.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the slimbus/core.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of components of the Linux operating system’s netdevsim kernel, allowing a hacker to cause a service failure

The vulnerability of the netdevsim components in the Linux operating system’s kernel involves the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-14456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: When an OpenSSL QUIC server Listener SSL object processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and...