608958 matches found
The vulnerability of the `range_is_hole_in_parent()` function in the `fs/btrfs/send.c` module of the btrfs file system in the Linux operating system allows a attacker to cause a service failure.
The vulnerability of the rangeisholeinparent function in the fs/btrfs/send.c module of the btrfs file system in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerabilities of the functions symlink_data() and smb2ParseSymlinkResponse() in the fs/smb/client/smb2file.c file from the Smb file system of the Linux operating system allow a attacker to gain access to protected information or cause service failures.
The vulnerability of the functions symlinkdata and smb2ParseSymlinkResponse in the fs/smb/client/smb2file.c module of the Smb file system in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a...
The vulnerability of the rxgk_do_verify_authenticator() function in the net/rxrpc/rxgk.c module allows attackers to compromise the confidentiality and accessibility of protected information, as it supports session sockets in the Linux operating system’s kernel.
The vulnerability of the rxgkdoverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside of the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
The vulnerability of the mt76_connac2_mac_write_txwi_80211() function in the drivers/net/wireless/mediatek/mt76/mt76_connac_mac.c file of the mediatek wireless adapter driver for the Linux operating system, which allows a hacker to cause a service failure.
The vulnerability of the mt76connac2macwritetxwi80211 function in the drivers/net/wireless/mediatek/mt76/mt76connacmac.c file of the wireless adapter driver for mediatek’s Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...
The vulnerability of the nfulnl_log_packet() function in the net/netfilter/nfnetlink_log.c module of the netfilter component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nfulnllogpacket function in the net/netfilter/nfnetlinklog.c module of the netfilter component of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to cause a service...
The vulnerability of the `bnxt_async_event_process()` function in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` file of the Ethernet network adapter driver for Broadcom’s Linux operating system, which allows a hacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the bnxtasynceventprocess function in the drivers/net/ethernet/broadcom/bnxt/bnxt.c file of the Ethernet network adapter driver for Broadcom’s Linux operating system is related to the occurrence of operations outside of the buffer in memory. Exploiting this vulnerability coul...
The vulnerabilities of the functions l2cap_disconnect_req() and l2cap_disconnect_rsp() in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerabilities of the functions l2capdisconnectreq and l2capdisconnectrsp in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem are related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting these vulnerabilities coul...
The vulnerability of the ext4_ext_correct_indexes() function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the ext4extcorrectindexes function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the...
PT-2026-81729
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome to...
Linux Distros Unpatched Vulnerability : CVE-2026-56702
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP...
CVE-2026-38470
A Broken access control vulnerability in the API user endpoint in GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 allows unprivileged, authenticated users to enable or disable arbitrary user accounts via the req=disable or req=enable action using a normal user-created...
PT-2026-81253
Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.4.2 Description A general user can mint admin access tokens through the '/access-tokens' endpoint. Recommendations Upgrade to version 3.4.2...
CVE-2026-38474
GazellePW GazellePosterWall commit 86c4bedf727691b5a97af42a4864869d18446449 suffers from a Broken access control vulnerability in the IP lock manager, which allows remote authenticated users to add, modify, or delete IP lock entries for arbitrary accounts via tools.php?action=iplock...
PT-2026-81188
The MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'mf form id' Widget Setting in all versions up to, and including, 4.1.8 due to insufficient input sanitization and output escaping. This makes it...
PT-2026-81514
Name of the Vulnerable Software and Affected Versions NVIDIA NemoClaw for Linux affected versions not specified Description A flaw in the remote-access helper workflow allows for weak authentication. This issue could enable an attacker to achieve remote code execution, disclose sensitive...
PT-2026-81177
Name of the Vulnerable Software and Affected Versions Jawn versions prior to 1.4.3 Description An issue exists that allows unauthenticated attackers to elevate their privileges to those of an administrator. Recommendations Update Jawn to a version newer than 1.4.2...
PT-2026-81601
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Device component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visi...
The vulnerability of the `prepare_playback_urb()` function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the prepareplaybackurb function in the sound/usb/pcm.c module, which supports USB audio devices in Linux operating systems, is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the l2cap_information_rsp() function in the net/bluetooth/l2cap_core.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality and accessibility of protected information.
The vulnerability of the l2capinformationrsp function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...
The vulnerability of the usbip_pack_ret_submit() function in the drivers/usb/usbip/usbip_common.c file of the Linux operating system’s device driver module allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the usbippackretsubmit function in the drivers/usb/usbip/usbipcommon.c file of the Linux device driver module is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...