312539 matches found
CVE-2026-93172
A flaw was found in the Linux kernel's memory management mm/mminit. A missing allocation check for pgdat-percpunodestats can lead to a NULL dereference. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service DoS...
CVE-2026-93178
A flaw was found in the Linux kernel's drm/amdgpu/pm/powerplay component. This vulnerability arises because the vddInd and vddcInd fields, derived from VBIOS-parsed tables, are used to index into voltage lookup tables without proper boundary checks. A local attacker could exploit this by providin...
CVE-2026-93176
A flaw was found in the Linux kernel's AMD display drm/amd/display driver. Specifically, the amdgpudmplanedrmplanereset function attempts to free memory before successfully allocating a new state. Should the new memory allocation fail, a dangling pointer to the previously freed memory remains. Th...
CVE-2026-93129
A flaw was found in the Linux kernel's dell-wmi-base driver. This vulnerability occurs due to an incorrect index used when accessing data fields related to the ultra performance key, which can lead to a potential buffer over-read. A local attacker could potentially exploit this to read sensitive...
CVE-2026-93115
A flaw was found in the Linux kernel's Mellanox mlxbf-pmc driver. A local attacker could exploit this by forcing the driver to bind to a device lacking an ACPI Advanced Configuration and Power Interface companion object. This action triggers a NULL pointer dereference, which can lead to a system...
CVE-2026-93070
A flaw was found in the ipu6 media driver of the Linux kernel. This vulnerability arises from incorrect handling of auxiliary device private data during initialization, leading to a double free condition. A local attacker could potentially exploit this to cause a denial of service or other memory...
CVE-2026-93050
A flaw was found in the Linux kernel's ipack: ipoctal module. This vulnerability arises from improper memory handling, specifically Use-After-Free UAF conditions and a NULL pointer dereference, when the device is removed while a terminal tty session is still active. A local attacker could exploit...
DEBIAN-CVE-2026-113496
A flaw was found in cockpit-machines. When saving Virtual Network Computing VNC console settings, the configured password is passed directly as a command-line argument to an underlying system utility. A local unprivileged attacker on a host that allows cross-user process inspection could read the...
CVE-2026-113388
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...
CVE-2026-113496
A flaw was found in cockpit-machines. When saving Virtual Network Computing VNC console settings, the configured password is passed directly as a command-line argument to an underlying system utility. A local unprivileged attacker on a host that allows cross-user process inspection could read the...
CVE-2026-34484 A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)
Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with restricted shell access can exploit this vulnerability to bypass local security restrictions and gain root access on th...
RLSA-2026:84595 Moderate: cockpit-files security update
A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race CVE-2026-91205 For more details about the...
EUVD-2026-104968
A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function settable of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launche...
tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm
A flaw was found in Apache Tomcat. When the Java Naming and Directory Interface JNDI realm is configured with a non-Generic Security Service Application Program Interface GSSAPI Simple Authentication and Security Layer SASL mechanism, a missing verification step allows an attacker to bypass...
tomcat: tomcat: Unauthorized socket access via TOCTOU race condition
A flaw was found in Apache Tomcat. A local attacker can gain unauthorized access to Unix domain communication sockets due to a time-of-check to time-of-use TOCTOU race condition in the APR/Native connector. When the connector initializes a socket, a brief timing window exists before restrictive...
CVE-2026-113388 opensource-socialnetwork Cache Settings dynamic.php input code injection
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...
EUVD-2026-104967
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...
CVE-2026-113388
A code injection vulnerability exists in opensource-socialnetwork versions up to 9.11/10.1 . The flaw resides in the Cache Settings component, specifically within the input function of the actions/administrator/cache/dynamic.php file. By manipulating the host , port , username , password , type ,...
CVE-2026-113388 opensource-socialnetwork Cache Settings dynamic.php input code injection
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...
CVE-2026-113388 opensource-socialnetwork Cache Settings dynamic.php input code injection
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...