CVE-2026-85421

A critical security vulnerability exists in Brocade ASCG versions prior to 3.5.0 . The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can exploit this flaw to issue control commands, modify syst...

CVE-2026-85421

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

EUVD-2026-94786

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on incoming requests. An unauthenticated attacker with network access can issue control commands, alter cluster states,...

CVE-2018-1000199

CVE-2018-1000199 Linuxのptraceコードはデバッグレジスタへのアクセスを仮想化しますが、その仮想化コードには誤ったエラーハンドリングがあります。つまり、例えばDR0に不正な値を書き込んだ場合、ptrace呼び出しは-EINVALを返すにもかかわらず、カーネルのブレークポイント追跡の内部状態が破損する可能性があります。...

RLSA-2026:77369 Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

mod_auth_openidc:2.3 security update

An update is available for cjose, modauthopenidc, module.modauthopenidc, module.cjose. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an...

glibc security update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

RLSA-2026:77576 Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The perl-DBI package provides the standard database interface module for the...

EUVD-2026-94752

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing any authenticated user, such as a subscriber, to file a withdrawal request against another user's wallet for an amount a...

CVE-2026-42945

CVE-2026-42945: NGINX Rift ヒープバッファオーバーフロー脆弱性 概要 CVE-2026-42945 は、NGINX サーバーにおける深刻なヒープバッファオーバーフローの脆弱性であり、「NGINX Rift」と呼ばれています。この脆弱性は NGINX の rewrite および set ディレクティブの処理ロジックに存在し、特定の設定条件が満たされた場合、攻撃者は悪意のあるリクエストを構築してヒープオーバーフローを引き起こし、サービス拒否（DoS）や潜在的なリモートコード実行（RCE）を引き起こす可能性があります。 脆弱性の種類 : ヒープバッファオーバーフロー...

CVE-2018-10933

CVE-2018-10933 - SSH 認証バイパス PoC 説明 CVE-2018-10933 は、libssh のサーバーサイド実装における認証バイパスの脆弱性です。この欠陥により、攻撃者は事前の認証なしに SSH2MSGUSERAUTHSUCCESS メッセージを送信し、不正アクセスを得ることができます。 影響を受けるシステム SSH サービスに脆弱なバージョンの libssh を使用しているすべてのサーバーが影響を受けます。 影響を受けるバージョン libssh 0.6 以上 修正バージョン: 0.7.6 および 0.8.4 使用方法 1. スクリプト内の ip をターゲットの...

CVE-2025-12748

CVE-2025-12748 Eng Rus Credit: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Issues: 687, 825 English 説明 XMLファイルの処理手順に問題が発見されました。 ファイルの内容の処理は、ACL チェックの前に実行されます。これにより、権限が制限されたユーザーが特別に細工された XML ファイルを送信し、過剰なリソース消費を引き起こし、サービス拒否 DoS 攻撃の可能性をもたらします。 環境設定 1. OS: Alt Linux P10 server 2. 記事 ロシア語 に従...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87663

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

EUVD-2023-60708

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to a persistent Denial of Service (DoS) . The flaw exists because the system directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configu...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...