260919 matches found
CVE-2026-78328
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
CVE-2026-78328
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
CVE-2026-78328
CVE-2026-78328 is a missing authorization (CWE-862) vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface. A lower-privileged Admin user can escalate privileges to SuperAdmin . SonicWall rates it CVSS 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The NVD/CNA entr...
EUVD-2026-71680
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
CVE-2026-84890
undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total decompressed output size is unbounded and there is no configuration option to limit it. A malicious or faulty upstream...
DEBIAN-CVE-2026-84890
undici's decompress interceptor decompresses response bodies according to the untrusted Content-Encoding header. While the number of content-encoding layers is capped, the total decompressed output size is unbounded and there is no configuration option to limit it. A malicious or faulty upstream...
AZL-99579 CVE-2026-80906 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...
CVE-2026-80905
In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...
CVE-2026-80906
In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...
AZL-99629 CVE-2026-80905 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...
DEBIAN-CVE-2026-80905
In the Linux kernel, the following vulnerability has been resolved: net: tap: fix wrong transportheader when sending VLAN-tagged frame In tapgetuserxdp, when processing a VLAN-tagged frame e.g. ETHP8021Q, skbsetnetworkheader is called first to advance networkheader past the VLAN tag to the inner...
DEBIAN-CVE-2026-80906
In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...
CVE-2026-80901
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...
DEBIAN-CVE-2026-80901
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...
AZL-99662 CVE-2026-80901 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix the checksum validations ipvsinicmpv6 is missing checksum validation for ICMPv6 packets from clients. In fact, as for TCP/UDP we should validate the checksum for ICMP packets only when we mangle the packets on MASQ or o...
CVE-2026-61614
SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tokens via a ?token= URL query parameter as a fallback to the X-API-TOKEN header. This causes long-lived API credentials to be recorded in server access logs, proxy logs, browser...
CVE-2026-19534
undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undic...
DEBIAN-CVE-2026-19534
undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undic...
grafana-pcp security update
An update is available for grafana-pcp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...
RLSA-2026:63119 Important: grafana-pcp security update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME head...