27168 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-45069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 6.4.40, 7.4.12, and 8.0.12,...
Webmin cross-site scripting vulnerabilities
Webmin is a set of web-based system management tools for Unix-like operating systems, developed by the Webmin community. Versions of Webmin prior to 2.641 contained a cross-site scripting vulnerability. This vulnerability stemmed from the email template description field in the System and Server...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect inference of the zero-copy status during the cleanup phase before messages are...
CVE-2026-22678: Improper Neutralization of Input During Web Page Generation
Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary JavaScript in the browser context of administrators by injecting...
CVE-2026-7887: Improper Validation of Specified Type of Input
For Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status. A user with uIsActive=0 suspended, banned, terminated employee can still authenticate via OAuth and receive valid API tokens. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score o...
CVE-2026-8399
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2026-40092
creationtimestamp| type| source ---|---|--- 2026-05-20 22:44:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcy7grcig2r...
CVE-2026-9118
creationtimestamp| type| source ---|---|--- 2026-05-20 20:30:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608796896901473 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...
CVE-2026-9111
creationtimestamp| type| source ---|---|--- 2026-05-20 20:03:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116608690801419755 2026-05-25 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260526 2026-05-26 18:00:00+00:00| seen|...
GHSA-XVP4-PHQJ-CJR3
creationtimestamp| type| source ---|---|--- 2026-05-20 19:40:50+00:00| seen| https://gist.github.com/alon710/cb972f8f962d8bc96860b04de0a95070 2026-06-26 21:42:10+00:00| seen| https://gist.github.com/alon710/e9c21cf2a4b3d2c5f2db0a4799f8c878...
CLSA-2026-1779298645 postfix: Fix of CVE-2026-43964
CVE-2026-43964: fix buffer over-read in dsnsplit when an enhanced status code is not followed by other text...
CVE-2026-8467
creationtimestamp| type| source ---|---|--- 2026-05-20 11:02:01+00:00| published-proof-of-concept| https://github.com/phenixdigital/phoenixstorybook/security/advisories/GHSA-55hg-8qxv-qj4p 2026-05-20 15:38:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmcaes4zid2e 2026-06-09...
CVE-2026-45063
creationtimestamp| type| source ---|---|--- 2026-05-20 10:57:14+00:00| seen| https://bsky.app/profile/symfony.com/post/3mmbqocmwr72o 2026-07-14 19:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmxjszsha2t 2026-07-15 09:32:04+00:00| seen|...
CVE-2026-33278
creationtimestamp| type| source ---|---|--- 2026-05-20 10:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/116606436980367840 2026-05-20 10:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mmbp6fht2k22 2026-05-20 10:36:24+00:00| seen|...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: virtio-pci: The result size returned for the admin command completion has been corrected. The result size returned by virtiopciadmindevpartsget is 8 bytes larger than the actual result data size. This occurs because the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: net/mlx5: Use mlx5ipsecrxstatusdestroy to correctly delete status rules. rxcreate no longer allocates a modifyhdr instance that needs to be cleaned up. The mlx5modifyheaderdealloc call will lead to a NULL pointer dereference. ...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: mt76: fixed the race condition related to the “tx status” after the station removal operation. There is a small race condition where ongoing TX activity can cause an skb to be added to the status tracking IDR, even after that...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Wifi: mac80211: Fixed the “general-protection-fault” in ieee80211subifstartxmit. When the device is running and the interface status changes, the “gpf issue” is triggered. The process that causes this issue is as follows: Thread ...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable status which contains the unhandled overflow bits is not being properly masked in some cases, resulting in the following warning: WARNING: CPU: 156 PID: 475601 at...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: x86/FPU: Fixed NULL dereference in avx512status. Problem: When CONFIGX86DEBUGFPU is enabled, reading /proc/kthread/archstatus causes a warning and a NULL pointer dereference. This occurs because the AVX-512 timestamp code uses...