304606 matches found
CVE-2026-78018
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-98208
A flaw was found in the Linux kernel's SDIO UART driver. When registering a new device port while all available port slots are occupied, the driver fails to release an allocated transmit buffer during error handling. A local user could exploit this flaw by repeatedly triggering failed device...
CVE-2026-78020
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16 , contains an Improper Certificate Validation vulnerability (CWE-295). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Remote execution , Information disclosure , and Denia...
EUVD-2026-95569
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesyst...
CVE-2026-106491
A flaw was found in the Backstage plugin-proxy-backend component. An authenticated remote attacker can exploit improper input validation by submitting a specially crafted request URL to the proxy backend. This causes the proxy service to forward requests to endpoints outside the configured base...
USN-8875-2 linux-nvidia vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
USN-8875-2: Linux kernel (NVIDIA) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2022-3114 Several...
EUVD-2026-95565
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering...
Security Bulletin: A heap buffer overflow vulnerability in rsyslog impacts AIX.
Summary Vulnerabilities in Rsyslog could cause heap buffer overflow CVE-2026-78002. Rsyslog is used by AIX as logging daemon. Vulnerability Details CVEID:CVE-2026-78002 DESCRIPTION: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the...
CVE-2026-98202
A flaw was found in the Linux kernel's Synaptics RMI4 input driver. When system power management operations such as suspend or resume occur while an RMI4 device remains unbound, the driver attempts to access uninitialized driver data without proper verification. This issue leads to a null pointer...
CVE-2026-19575 Type confusion in the device_deinit system call allows user-mode threads to execute arbitrary kernel code
The user-mode verification handler for the devicedeinit system call, zvrfydevicedeinit in kernel/device.c, validated its dev argument with KSYSCALLOBJINITdev, KOBJANY. kobjectvalidate short-circuits its type comparison when the requested type is KOBJANY, so the check reduced to "this pointer is t...
CVE-2026-98227
A flaw was found in the Linux kernel's MemoryStick block driver. The driver fails to release its internal input/output work queue when a card is removed from the system. A local attacker with physical access could exploit this flaw by repeatedly inserting and removing storage cards, gradually...
CVE-2026-7827
A stack-based buffer overflow in the RdbLoadEntity function of the RDB graph decoders src/serializers/decoders//decodegraphentities.c in FalkorDB before 4.18.4 allows a remote attacker who can issue Redis replication commands for example, against an instance with no password configured to cause a...
aquatone
AQUATONE Aquatone es una herramienta para la inspección visual de sitios web a través de una gran cantidad de hosts y es conveniente para obtener rápidamente una visión general de la superficie de ataque basada en HTTP. Instalación 1. Instale el navegador Google Chrome o Chromium -- Nota: Google...
metabadger
Metabadger Previene ataques SSRF en AWS EC2 mediante actualizaciones automatizadas al más seguro Servicio de Metadatos de Instancia v2 IMDSv2. Metabadger Propósito y funcionalidad Diagnosticar y evaluar tu uso actual del Servicio de Metadatos de Instancia de AWS, además de entender cómo funciona ...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
EUVD-2026-95328
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
EUVD-2026-95329
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow...