99 matches found
CVE-2026-92468: Authorization Bypass Through User-Controlled Key
zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the search-center service that allows authenticated attackers to read any Elasticsearch index by specifying the index name in POST /search/indexName and GET /agg/requestStat/indexName/routing path...
CVE-2026-74697
A flaw was found in the Linux kernel's bnxten driver. This vulnerability occurs when End of frame padding EOP on the AGG ring overlaps with subsequent data segments. On older network chips, if Relaxed Ordering RO is active, this overlap can cause valid data to be overwritten with zeros. This can...
SUSE CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
AZL-97104 CVE-2026-74697 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697
This vulnerability affects the bnxt_en driver in the Linux kernel, used for Broadcom NetXtreme network adapters. When Total Packet Assembly (TPA) is enabled, End of frame padding (EOP) on the AGG ring can overlap with the next data segment. If Relaxed Ordering (RO) is active, the zero padding may...
EUVD-2026-64384
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697 bnxt_en: Disable EOP for TPA on all chips to prevent data corruption
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
PT-2026-79702
In the Linux kernel, the following vulnerability has been resolved: bnxt en: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
CVE-2026-74697: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering RO is...
Linux Distros Unpatched Vulnerability : CVE-2026-74697
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bnxten: Disable EOP for TPA on all chips to prevent data corruption EOP End of frame padding on the AGG ring may cause overlapping of zero padding at the end of...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007585)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007585 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix null-deref in aggdequeue To prevent a potential crash in aggdequeue...
CVE-2025-68770
CVE-2025-68770 affects the bnxt_en driver in the Linux kernel. The issue occurs in the XDP_TX path: in bnxt_rx_xdp(), the event flags can be cleared too early when the XDP_TX action is taken again, potentially while the TX ring has no room. This can cause the TX producer to advance without the dr...
EUVD-2025-136971
Malicious code in imuay-agg-iguqaidb npm...
EUVD-2025-136981
Malicious code in imuay-agg-ibifua npm...
EUVD-2025-136959
Malicious code in imuay-agg-iguqauidb npm...
Malicious code in imuay-agg-ibifua (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31379a469ebfc09f8110ece98c134a8a97ee8f2d81ac73a4765624a15196cd31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...