23305 matches found
CVE-2026-75834
Grav before 2.0.14 contains a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. All XSS detection patterns use the PCRE /u UTF-8 modifier, so a single invalid UTF-8 byte anywhere in page content causes pregmatch to return false for...
[SECURITY] [DLA 4745-1] linux-6.12 security update
Debian LTS Advisory DLA-4745-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings August 18, 2026 https://wiki.debian.org/LTS Package : linux-6.12 Version : 6.12.101-1deb12u1 CVE ID : CVE-2025-40098 CVE-2026-45897 CVE-2026-45901 CVE-2026-53078 CVE-2026-53090...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
Linux Distros Unpatched Vulnerability : CVE-2026-68473
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/uaccess: correct check for CONFIGPPCE500 in maskuseraddress maskuseraddress incorrectly checks for CONFIGE500 instead of CONFIGPPCE500, causing...
Linux Distros Unpatched Vulnerability : CVE-2026-72286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host migration/mirroring feature is not fully implemented for SEV-SNP VMs. The proper...
Linux Distros Unpatched Vulnerability : CVE-2026-68474
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - powerpc/spufs: fix out-of-bounds access in spufsmemmmapaccess spufsmemmmapaccess computes the local store offset as address - vma-vmstart, but bounds-checks it...
Linux Distros Unpatched Vulnerability : CVE-2026-72095
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dma-fence: Make dmafencededuparray robust against 0-count input dmafencededuparray returns 1 when called with numfences == 0: the for-loop body never executes, ...
Linux Distros Unpatched Vulnerability : CVE-2026-74328
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommufd: Destroy the pages content after detaching from dmabuf Sashiko points out this has gotten out of order, the mutex could still be in use through the dmab...
Linux Distros Unpatched Vulnerability : CVE-2026-72480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling amseventtochannel may return a pointer past the end of dev-channels when no matching...
Linux Distros Unpatched Vulnerability : CVE-2026-72196
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetv...
PT-2026-77017
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 Description A race condition exists in the JavaScript Engine component. A race condition is a situation whe...
CVE-2026-72111
A flaw was found in the Linux kernel's BPF verifier. When processing a context load of an LSM hook return value, the markregs32range function incorrectly intersects new register bounds with stale ones, rather than replacing them. This can lead to a mismatch between the verifier's understanding of...
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-42530 vulnerabilities
Vulnerabilities for packages: nginx-mainline...
GHSA-V5X7-VHWF-5V44 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-18809 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-42926 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
MINI-5RP5-MJ84-GFR7
Bulletin has no description...