CVE-2018-1000199

CVE-2018-1000199 Linux ptrace कोड डीबग रजिस्टरों तक पहुंच को वर्चुअलाइज़ करता है, और वर्चुअलाइज़ेशन कोड में गलत त्रुटि प्रबंधन है। इसका मतलब है कि यदि आप DR0 में कोई अवैध मान लिखते हैं, तो कर्नेल के ब्रेकपॉइंट ट्रैकिंग की आंतरिक स्थिति दूषित हो सकती है, इस तथ्य के बावजूद कि ptrace कॉल -EINVAL...

RLSA-2026:77369 Important: mod_auth_openidc:2.3 security update

The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...

mod_auth_openidc:2.3 security update

An update is available for module.modauthopenidc, module.cjose, cjose, modauthopenidc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an...

perl-DBI security update

An update is available for perl-DBI. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The perl-DBI package provides the standard database interface module for the...

glibc security update

An update is available for glibc. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The glibc packages provide the standard C libraries libc, POSIX thread librarie...

RLSA-2026:77576 Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: perl-DBI: perl-DBI: Denial of...

EUVD-2026-94752

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing any authenticated user, such as a subscriber, to file a withdrawal request against another user's wallet for an amount a...

CVE-2026-42945

CVE-2026-42945: NGINX Rift हीप बफर ओवरफ्लो भेद्यता अवलोकन CVE-2026-42945, NGINX सर्वर में एक गंभीर हीप बफर ओवरफ्लो भेद्यता है, जिसे "NGINX Rift" कहा जाता है। यह भेद्यता NGINX के rewrite और set निर्देशों की प्रोसेसिंग लॉजिक में मौजूद है। जब विशिष्ट कॉन्फ़िगरेशन शर्तें पूरी होती हैं, तो हमलावर...

CVE-2018-10933

CVE-2018-10933 - SSH प्रमाणीकरण बाईपास PoC विवरण CVE-2018-10933 libssh के सर्वर-साइड कार्यान्वयन में एक प्रमाणीकरण बाईपास कमजोरी है। यह दोष एक हमलावर को बिना किसी पूर्व प्रमाणीकरण के SSH2MSGUSERAUTHSUCCESS संदेश भेजने की अनुमति देता है, जिससे अनधिकृत पहुँच प्राप्त होती है। प्रभावित सिस्टम एसएसएच...

CVE-2025-12748

CVE-2025-12748 Eng Rus Credit: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss Issues: 687, 825 English Description تم اكتشاف مشكلة في إجراء معالجة ملف XML. يتم تنفيذ معالجة محتوى الملف قبل التحقق من ACL. وهذا يسمح للمستخدم ذي الصلاحيات المحدودة بإرسال ملف XML مُصمم خصيصًا يمكن أن يتسبب في...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87663

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames across the fabric, the receiving switch processes these...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

EUVD-2023-60708

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2023-5649

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service DoS when collecting “supportsave” from a Brocade Switch...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 are vulnerable to a persistent Denial of Service (DoS) . The flaw exists because the system directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configu...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87661

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

EUVD-2026-94735

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the web management service from starting or recovering during...

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...