14019 matches found
CVE-2026-23070
In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes supported, advertised and EEPROM data in shared firmware structure which kernel access via MAC blockCGX/RPM. Accessing fwdata, on boards booted...
CVE-2026-23070
CVE-2026-23070 is an in-kernel issue affecting the Linux kernel (noted in Debian/SUSE advisories) related to Octeontx2-af hardware. The vulnerability stems from missing/insufficient checks for fwdata in the shared firmware structure accessed by the MAC block (CGX/RPM). On boards booted without MA...
EUVD-2026-5474
In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes supported, advertised and EEPROM data in shared firmware structure which kernel access via MAC blockCGX/RPM. Accessing fwdata, on boards booted...
CVE-2026-23070 Octeontx2-af: Add proper checks for fwdata
In the Linux kernel, the following vulnerability has been resolved: Octeontx2-af: Add proper checks for fwdata firmware populates MAC address, link modes supported, advertised and EEPROM data in shared firmware structure which kernel access via MAC blockCGX/RPM. Accessing fwdata, on boards booted...
CVE-2025-36194
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...
PT-2026-26614
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration ZCS versions 10.0 and 10.1 Description A stored cross-site scripting XSS issue exists in the Zimbra Briefcase feature because of inadequate sanitization of certain uploaded file types. When a user opens a publicly shared...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from improper use of shared variables, potentially leading to state corruption...
The vulnerability of the smcr_port_add() function in the net/smc/smc_core.c module of the SMC protocol family implementation in Linux kernel allows a hacker to cause a service failure.
The vulnerability of the smcrportadd function in the net/smc/smccore.c module of the SMC protocol family implementation in Linux kernel relates to the assignment of pointers. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sc16is7xx_probe() function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel’s parallel port allows a attacker to cause a service failure.
The vulnerability of the sc16is7xxprobe function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
NanoMQ 代码问题漏洞
NanoMQ is an open-source IoT edge platform broker developed by EMQ in the United States. Version 0.24.6 of NanoMQ contains a code vulnerability that stems from inconsistent protocol parsing or forwarding during the handling of shared subscriptions. This vulnerability may lead to remote crashes...
PT-2026-5967
Name of the Vulnerable Software and Affected Versions NanoMQ versions prior to 0.24.7 Description NanoMQ MQTT Broker NanoMQ has an issue related to protocol parsing and forwarding when handling shared subscriptions $share/. A malformed SUBSCRIBE topic, such as $share/ab missing the second /, is n...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the hugetlbpmdshared function not properly handling shared memory, potentially leading to memory...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50282: chardev: fix error handling in cdevdeviceadd bsc1249739. CVE-2022-50630: mm: hugetlb: fix UAF in hugetlbhandleuserfault bsc1254785. CVE-2022-50700: wifi:...
When Cloud Outages Ripple Across the Internet
Recent major cloud service outages have been hard to miss. High-profile incidents affecting providers such as AWS, Azure, and Cloudflare have disrupted large parts of the internet, taking down websites and services that many other systems depend on. The resulting ripple effects have halted...
The vulnerability of the `ivpu_gem_bo_free()` function in the `drivers/accel/ivpu/ivpu_gem.c` file of the Linux operating system’s Intel NPU driver allows a hacker to trigger a service failure.
The vulnerability of the ivpugembofree function in the drivers/accel/ivpu/ivpugem.c file of the Linux operating system’s NPU driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260203-73-0012
A vulnerability in the net/sched/schqfq.c component of the Linux operating system kernel is related to insufficient state checking of a shared resource. Exploitation of the vulnerability could allow an attacker to affect data integrity...
Insertion of Sensitive Information Into Sent Data
Overview sagemaker is an Open source library for training and deploying models on Amazon SageMaker. Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the storage of HMAC keys and disclosure through the DescribeTrainingJob API. An attacker ca...
CVE-2026-24040
jsPDF is a library to generate PDFs in JavaScript. Prior to 4.1.0, the addJS method in the jspdf Node.js build utilizes a shared module-scoped variable text to store JavaScript content. When used in a concurrent environment e.g., a Node.js web server, this variable is shared across all requests. ...
CVE-2025-36194
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...
CVE-2025-36194
IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...