29693 matches found
Linux kernel ip6erspan_changelink Heap Buffer Overflow DoS
The vulnerability of the ip6erspanchangelink function in the net/ipv6/ip6gre.c module of the Linux kernel is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...
Linux RDS DMA Buffer Overflow DoS
The vulnerability in the rdsrdmamap function within the net/rds/rdma.c file of the Linux kernel operating system is related to the use of a name with an incorrect reference. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...
Linux Distros Unpatched Vulnerability : CVE-2026-80821
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: pci-epf: put CQ ref on createcq mapping failure nvmetpciepfcreatecq calls nvmetcqcreate, which takes a reference on the controller and installs the...
PT-2026-86765
Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view. The vulnerable handler queried CryptographicKey directly using the supplied key ID and selected sensitive fields such as: type key data fingerprint but did n...
PT-2026-86802
Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get reference data without first checking whether the requester is authorized to view the object the reference belongs to. The vulnerable code queried ObjectReference.uuid...
PT-2026-86796
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...
CVE-2026-86430: Inefficient Algorithmic Complexity
league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. Attackers can submit specially crafted Markdown with long...
CVE-2026-4945: Authorization Bypass Through User-Controlled Key
The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.7 via the 'watchcheckout' function due to missing validation on a user controlled key. This makes it possib...
Linux Distros Unpatched Vulnerability : CVE-2026-80898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: clear PGprivate2 on copy-to-cache append failure netfspgpriv2copytocache marks the folio with PGprivate2 before netfspgpriv2copyfolio appends it to the...
Malicious code in ecs-api-reference (npm)
The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...
CVE-2026-16310: Authorization Bypass Through User-Controlled Key
The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to change the password of any WordPress...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053239)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053239 advisory. In the Linux kernel, the following vulnerability has been resolved: ceph: remove the incorrect Fw reference check when dirtying pages When doing the direct-io reads ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053244)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053244 advisory. In the Linux kernel, the following vulnerability has been resolved: ax25: Fix reference count leak issue of netdevice There is a reference count leak issue of the...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053412)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053412 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix mbcacheentry's erefcnt leak in ext4xattrblockcachefind Syzbot reports a warning as...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053317)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053317 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: fix reference leak when pmruntimegetsync fails The PM reference count is not expected ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053319)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053319 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: altmode should keep reference to parent The altmode device release refers to its pare...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053400)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053400 advisory. In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CI...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053404)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053404 advisory. In the Linux kernel, the following vulnerability has been resolved: macsec: fix UAF bug for realdev Create a new macsec device but not get reference to realdev. That...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053245)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053245 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: terminate outstanding dump on socket close Netlink supports iterative dumping of data. I...
