210114 matches found
CVE-2026-70188
Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96237
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
ROS-20261013-73-0344
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70165
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
ROS-20261013-73-0275
The vulnerability of the bpfiterunixseqshow function in the net/unix/afunix.c module, which is part of the Linux kernel’s networking functions, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261013-73-0153
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
pcre2 security update
10.44-1.5.0.1 - Add post script to resolve Regex version mismatch Orabug: 34742224 10.44-1.5 - Fix and bump release, resolve the issue of build not attaching to errata 10.44-1.4 - Backport CVE fixes for CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161...
pcre2 security update
10.40-7.0.1 - Add post script to resolve Regex version mismatch Orabug: 34742224 10.40-7 - Backport multiple CVE fixes - CVE-2026-86145, CVE-2026-89156, CVE-2026-89157, CVE-2026-89158, CVE-2026-89160, CVE-2026-89161...
ROS-20261013-73-0348
The vulnerability of the ulpiregister function in the drivers/usb/common/ulpi.c module of the Linux device driver framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
ROS-20261013-73-0128
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0071
The vulnerability of the ccmacdigest function in the drivers/crypto/ccree/cchash.c module of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a system failure...
ROS-20261013-73-0087
The vulnerability in the kernel-lt is related to integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code...
ROS-20261013-73-0373
The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20261013-73-0434
The vulnerability in the kernel-lt is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0451
The vulnerability in the kernel-lt is related to a memory rerelease error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0296
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-108266
Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...