259557 matches found
CVE-2026-64214
In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preemptdisable|enable calls from archirqworkraise A kernel panic is observed when handling machine check exceptions from real mode. BUG: Unable to handle kernel data access on read at...
CVE-2026-64212
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwlmldremovelink, the link-fwid is saved at the beginning of the function so we have it after we freed the link. But the link pointer can be NULL, and is...
CVE-2026-10697
creationtimestamp| type| source ---|---|--- 2026-07-24 15:06:52+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116975574175126560 2026-07-24 15:06:52+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrfmwilh3j2z 2026-07-24 16:45:10+00:00| seen|...
CVE-2026-56163 Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
A missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided...
CVE-2026-66144
Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a denial of service attack if a huge policy is retrieved. Users are recommended to upgrade to version 3.2.3, which fixes this issue by imposing a default maximu...
CVE-2026-45816
NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event. This requires disabled asserts otherwise assert would trigger before NULL dereference and bogus or misbehaving controller, thus severity is low. This issue affects Apache NimBLE: through 1.9.0. Users are...
CVE-2026-16743
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read arbitrary files accessible to the...
CVE-2026-16804
creationtimestamp| type| source ---|---|--- 2026-07-24 12:45:46+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-google-chrome-64 2026-07-24 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrfhjxwat52o...
CVE-2026-46452
CVE-2026-46452 covers an Improper Input Validation vulnerability in Apache NimBLE’s Mesh Proxy SAR reassembly path. The issue can cause broken data to be passed toward the application, leading to memory pressure and unstable parsing behavior. Affected software ranges to NimBLE up to version 1.9.0...
EUVD-2026-48580
Parse Server versions = 9.0.0 before 9.10.0-alpha.6 and = 8.2.2 before 8.6.87 disclose Pointer and Relation target class names through GraphQL validation and input-coercion error messages when public schema introspection is disabled graphQLPublicIntrospection: false, the default. Because these...
EUVD-2026-48551
Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user...
CVE-2026-63317
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
CVE-2026-12702
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
EUVD-2026-48531
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
GHSA-272M-GCWP-MPWG vulnerabilities
Vulnerabilities for packages: apache-hop-fips, apache-hop, pinot, pinot-fips, tez, thingsboard...
GHSA-WC96-39FC-566F vulnerabilities
Vulnerabilities for packages: apache-hop-fips, apache-hop, pinot, pinot-fips, tez, thingsboard...
GHSA-G7HG-VRCF-MVMR vulnerabilities
Vulnerabilities for packages: apache-hop-fips, apache-hop, pinot, pinot-fips, tez, thingsboard...
GHSA-JPPX-W49H-X2QQ vulnerabilities
Vulnerabilities for packages: apache-pulsar, kayenta-fips, cloudwatch-exporter, infinispan, apicurio-registry, hono, flyway, floci-az, keycloak, s3proxy, kafbat-ui, knative-kafka-broker, reposilite, flyway-fips, nuxeo, request-9047-keycloak-fips, apicurio-registry-fips, kayenta,...
