488 matches found
CVE-2026-11104-Python-SSTI-via-Jinja2-attr-Filter-Bypass
CVE-2026-11104 – Python SSTI via Jinja2 |attr Filter Bypass Program Code Flask vulnerableapp.py - Flask with Jinja2 SSTI via 'attr' filter from flask import Flask, request, rendertemplatestring app = Flaskname @app.route'/' def index: name = request.args.get'name', 'World' UNSAFE: directly render...
PT-2026-134468
Name of the Vulnerable Software and Affected Versions User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission versions prior to 4.3.14 Description Insufficient input sanitization and output escaping allow unauthenticated...
PT-2026-128094
In the Linux kernel, the following vulnerability has been resolved: ntfs: move attribute payload before shrinking its record ntfs new attr flags resizes the non-resident attribute record before moving its name and mapping pairs to their shorter-header offsets when compression or sparse state is...
PT-2026-121857
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211 hwsim: reject undersized HWSIM ATTR TX INFO hwsim tx info frame received nl casts the HWSIM ATTR TX INFO payload to a struct hwsim tx rate and unconditionally reads IEEE80211 TX MAX RATES entries 8 bytes from it. T...
kernel: Fix of 9 CVEs
rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 - xfs: fix freemap adjustments when adding xattrs to leaf blocks CVE-2026-43158 - xfs: delete attr leaf freemap entries when empty CVE-2026-43158 - ALSA: 6fire: fix use-after-free on disconnect CVE-2026-31581 - brcmfmac:...
CLSA-2025-1747430081 Fix of 47 CVEs
CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 - driver core: Fix ueventsho...
openSUSE 16: acl / attr / libacl-devel / libacl1 / libattr-devel / etc (openSUSE-SU-2026:21832-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21832-1 advisory. This update for acl, attr fixes the following issue: - CVE-2026-54369,CVE-2026-54370,CVE-2026-54371: Symlink Traversal Privilege Escalation via...
PT-2026-116750
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3.0-rc3 Description An issue exists in the IPv6 segment routing implementation where the SEG6 ATTR DST attribute in seg6 genl policy is defined using NLA BINARY. This configuration only enforces a maximum paylo...
PT-2026-116760
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3.0-rc3 Description An issue exists in the Linux kernel where omitting the FOU ATTR IPPROTO attribute when sending a FOU CMD ADD request with FOU ATTR TYPE set to FOU ENCAP DIRECT allows the creation of a socke...
Astra Linux – vulnerability in linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop triggered by zero-sized ATTRLIST We discovered an infinite loop bug in the ntfs3 file system that can lead to a Denial-of-Service DoS condition. A malformed NTFS image can cause an infinite loop when ...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fixed a reference leak in the GID entry when the createah operation fails. If the AH create request fails, the sgidattr should be released to avoid a reference leak during the release of the GID table...
Astra Linux – vulnerability in linux-5.15
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Added null pointer check to attrloadrunsvcn Certain metadata files are processed prior to MFT. This includes a null pointer check for some edge cases that could lead to NPD when reading these metadata files from a...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fixed an infinite loop in attrloadrunsrange when there are inconsistencies in metadata. We have identified a bug in the ntfs3 file system where a malformed NTFS image can cause an infinite loop. This occurs when an...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : attr vulnerability (USN-8691-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8691-1 advisory. It was discovered that attr incorrectly handled symbolic links while traversing directory...
Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by multiple vulnerabilities in system and open source components
Summary IBM Integrated Analytics System IIAS includes various open source packages, runtimes, and system libraries as part of its underlying platform. Multiple security vulnerabilities have been identified across components including Oracle Java SE, cryptography, Apache HttpComponents, libssh,...
EulerOS 2.0 SP11 : attr (EulerOS-SA-2026-4212)
According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...
EulerOS 2.0 SP13 : attr (EulerOS-SA-2026-4030)
According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...
EulerOS 2.0 SP13 : attr (EulerOS-SA-2026-4121)
According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...
EulerOS 2.0 SP11 : attr (EulerOS-SA-2026-4303)
According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...
EulerOS 2.0 SP15 : attr (EulerOS-SA-2026-3898)
According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...