24892 matches found
RockyLinux 9 : kernel (RLSA-2026:43307)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:43307 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: scsi: core: Wake up the error handler when final...
PT-2026-63922
Unauthenticated Insecure Direct Object References IDOR in Shiptastic for WooCommerce = 5.1.0 versions...
kernel security update
6.12.0-211.38.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
Allocation of Resources Without Limits or Throttling
Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the areAllActionIdsValid validation in server action form submission handling. An attacker can exhaust CPU and block other requests in the same...
Dompdf: Embedded SVG images can leak existence of files and directories within the filesystem
Summary If a malicious actor can supply unrestricted content for rendering by Dompdf they can utilize the SVG rendering functionality to leak filesystem information when rendering PDF files using image references within a data-URI encoded SVG document. Details Using an element inside a data-URI...
CVE-2026-60367
...
CGA-472V-6VRR-8C84
Bulletin has no description...
MINI-69V4-5MW5-9J3Q
Bulletin has no description...
MINI-X96F-4FXR-C72G
Bulletin has no description...
MINI-VVJ8-5V85-VFR9
Bulletin has no description...
MINI-RG79-328Q-W888
Bulletin has no description...
MINI-352F-WP42-99R8
Bulletin has no description...
MINI-WC69-6W2G-PVMR
Bulletin has no description...
MINI-3HGW-2387-FR6Q
Bulletin has no description...
MINI-FG7V-3QGV-CQHQ
Bulletin has no description...
MINI-65WW-4WCM-V29R
Bulletin has no description...
CVE-2026-65013
Technical details about CVE-2026-65013 are not publicly available in the provided documents; monitor for updates.
CVE-2026-65013 Onlook tRPC Insecure Direct Object Reference via multiple procedures
Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users' resources by supplying arbitrary UUID values to tRPC API procedures including project.get, member.remove, and...