104 matches found
CVE-2026-99122
A flaw was found in the Linux kernel. This flaw allows a Denial of Service DoS due to missing source validation in the Virtual Machine Communication Interface VMCI socket implementation. When handling incoming stream packets, the kernel can assign traffic to a connected socket without verifying...
CVE-2026-99123
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
CVE-2026-99122
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for connected sockets vmcitransportrecvstreamcb looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback can select a...
SUSE CVE-2026-99122
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for connected sockets vmcitransportrecvstreamcb looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback can select a...
SUSE CVE-2026-99123
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
AZL-111224 CVE-2026-99122 affecting package kernel 6.6.161.1-1
In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: validate packet source for connected sockets vmcitransportrecvstreamcb looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback can select a...
AZL-111227 CVE-2026-99123 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: validate packet source for connected sockets virtiotransportrecvpkt looks up sockets first by the full source and destination tuple, then by destination only in the bound table. The fallback is needed for listening...
Hitachi HiRDB input validation error vulnerability
Versions 10-00 through 10-12-01 of Hitachi HiRDB, versions 9-00 through 09-66-22 and earlier of HiRDB Server, versions 9-00 through 09-66/V and earlier of HiRDB Server with Additional Function, versions 9-02 through 09-66-22 and earlier of HiRDB Server Version 9 32, and versions 9-00 through...
Rocky Linux 10.2 [CIQ] Security Update: dnsmasq / dnsmasq-debuginfo / dnsmasq-debugsource / dnsmasq-utils / etc Multiple Vulnerabilities (crlsa-2026_19158)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619158 advisory. dnsmasq: dnsmasq: heap buffer overflow in cache via NAMEESCAPE expansion CVE-2026-2291 dnsmasq: NSEC bitmap parsing infinite loop CVE-2026-4890 dnsmasq...
EUVD-2026-80007
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper address, and the relay agent would forward it to...
CVE-2026-73437
On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper address, and the relay agent would forward it to...
CVE-2026-73437
Arista EOS DHCP relay is vulnerable to spoofed DHCP reply forwarding (CWE-345). An unauthenticated attacker on an adjacent network can send crafted DHCP reply packets from a non-helper IP address, which the relay forwards to clients without source validation, potentially supplying malicious netwo...
PT-2026-93175
Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An unauthenticated attacker with network access can exploit a flaw in the Dynamic Host Configuration Protocol DHCP relay. By sending a crafted DHCP reply packet from an IP address not...
EUVD-2026-70805
MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRYSHOREHOST messages on the vehicle bus, allowing any publisher to enroll attacker-controlled shore routes. Attackers can publish malicious shore route messages to receive bridged vehicle traffic including sensor data and...
PT-2026-69142
Name of the Vulnerable Software and Affected Versions Home Assistant versions prior to 2026.8.1 Description The Companion app processes tag links NFC or QR received via OS-level routing as physical scans without validating the source app or requesting user confirmation. This allows an untrusted...
CVE-2026-66732
Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...
Combating Knowledge Corruption in Agent Systems: A Byzantine-Tolerant Secure Collaborative RAG Framework
While retrieval-augmented generation systems partially address the hallucination issues in large language models, it also introduces new vulnerabilities to knowledge corruption attacks. Adversaries exploit these vulnerabilities by poisoning documents provided by RAG system to manipulate LLM...
GHSA-8W86-M9H8-HVQG ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
Impact The SQL IMPORT DATABASE statement did not require administrative privileges and passed its source URL to the importer without validation. Any authenticated user with SQL command access not only root/administrators could therefore: - Server-Side Request Forgery CWE-918: cause the server to...
PT-2026-60660
Impact The SQL IMPORT DATABASE statement did not require administrative privileges and passed its source URL to the importer without validation. Any authenticated user with SQL command access not only root/administrators could therefore: - Server-Side Request Forgery CWE-918: cause the server to...
PT-2026-125828
Уязвимость компонента Paint веб-браузеров Google Chrome и Microsoft Edge связана с недостатком в механизме подтверждения источника. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации с помощью специально созданной HTML-страницы...