CVE-2026-22913

Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data...

EUVD-2026-2813

Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data...

EUVD-2026-2822

A flaw was found in Keycloak. This improper input validation vulnerability occurs because Keycloak accepts RFC-compliant matrix parameters in URL path segments, while common reverse proxy configurations may ignore or mishandle them. A remote attacker can craft requests to mask path segments,...

CVE-2026-0976

Keycloak contains an improper input validation vulnerability (CVE-2026-0976) where RFC-compliant matrix parameters in URL path segments can be processed in ways that bypass reverse-proxy path filtering, potentially exposing administrative or sensitive endpoints. Affected component commonly cited ...

CVE-2025-71123

creationtimestamp| type| source ---|---|--- 2026-01-15 09:41:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115898454591231001 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511 2026-07-28 16:22:28+00:00|...

net: usb: asix: validate PHY address before use

...

CVE-2026-0717

The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the /wp-json/lottiefiles/v1/settings/ REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site...

SAP NetWeaver ICM Info Sensitive Information Disclosure

SAP NetWeaver Internet Communication Manager ICM includes an information page that can disclose sensitive information about the SAP platform, such as operating system version, SAP version, IP address, and other details. If this page is accessible without proper authentication, it can expose...

CVE-2025-67246

A local information disclosure vulnerability exists in the Ludashi driver before 5.1025 due to a lack of access control in the IOCTL handler. This driver exposes a device interface accessible to a normal user and handles attacker-controlled structures containing the lower 4GB of physical addresse...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001865)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001865 advisory. The LISTPOISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003515 advisory. In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showflopp...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003323 advisory. The archpickmmaplayout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier fo...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002217)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002217 advisory. The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, whi...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003417)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003417 advisory. The docheck function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allowptrleaks value available for restricting the output of the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003132 advisory. A missing address check in the callers of the showopcodes in the Linux kernel allows an attacker to dump the kernel memory at an arbitrary kernel address into the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001786)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001786 advisory. The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002147 advisory. The rdsibxmit function in net/rds/ibsend.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to...

PT-2026-3108

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service jdhcpd of Juniper Networks Junos OS and Junos OS Evolved allows a DHCP client in one subnet to exhaust the address pools of other subnets, leading to a Denial of Service DoS on the downstream DHCP...

PT-2026-3191

Name of the Vulnerable Software and Affected Versions Satera LBP670C Series/Satera MF750C Series versions v06.02 and earlier Color imageCLASS LBP630C/Color imageCLASS MF650C Series/imageCLASS LBP230 Series/imageCLASS X LBP1238 II/imageCLASS MF450 Series/imageCLASS X MF1238 II/imageCLASS X MF1643i...

PT-2026-3059

Name of the Vulnerable Software and Affected Versions Ludashi driver versions prior to 5.1025 Description A local information disclosure issue exists in the Ludashi driver due to insufficient access control within the IOCTL handler. The driver provides a device interface accessible to standard...