44017 matches found
PT-2026-67927
Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...
ROS-20260804-73-0044
The vulnerability of the archuprobecopyixol function in the arch/riscv/kernel/probes/uprobes.c module of the platform management subsystem for the RISCV architecture of the Linux operating system is related to the use of insufficiently random values. Exploiting this vulnerability could allow an...
ROS-20260804-73-0042
The vulnerability of the xskgenericrcv function in the net/xdp/xsk.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of...
OPENSUSE-SU-2026:11445-1 bouncycastle-1.85-1.1 on GA media
These are all security issues fixed in the bouncycastle-1.85-1.1 package on the GA media of openSUSE Tumbleweed...
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system, related to insufficient input data validation, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the http_proxy_connect() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the httpproxyconnect function in the RDP client FreeRDP is related to the lack of handling for CRLF sequences in HTTP headers when processing the variable ServerHostname. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
OPENSUSE-SU-2026:11444-1 azure-storage-azcopy-10.32.6-1.1 on GA media
These are all security issues fixed in the azure-storage-azcopy-10.32.6-1.1 package on the GA media of openSUSE Tumbleweed...
Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a vulnerability in Cassandra Reaper 4.0
Summary IBM Sterling Global Availability Mailbox uses Cassandra Reaper 4.0, which is affected by privilege escalation CVE-2026-27314 and resource consumption CVE-2026-32588 vulnerabilities. Vulnerability Details CVEID:CVE-2026-27314 DESCRIPTION: Privilege escalation in Apache Cassandra 5.0 on an...
Security Bulletin: IBM Sterling Global Availability Mailbox is affected by a vulnerability in Cassandra 4.0
Summary Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input. Vulnerability Details CVEID:CVE-2025-12183 DESCRIPTION: Out-of-bounds memory operations in org.lz4:lz4-java 1.8....
CVE-2026-69079
CTI-Transmute contains an uncontrolled resource-consumption vulnerability in the unauthenticated /activitytimeline endpoint. The endpoint accepts a user-controlled days query parameter that was not restricted to a reasonable range. A remote, unauthenticated attacker could submit an excessively...
OPENSUSE-SU-2026:11441-1 xen-4.22.0_02-1.1 on GA media
These are all security issues fixed in the xen-4.22.002-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11438-1 alloy-1.18.0-1.1 on GA media
These are all security issues fixed in the alloy-1.18.0-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260803-73-0015
The vulnerability of the ioinitreq function in the iouring/iouring.c module of the Linux kernel’s asynchronous input/output interface relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
OPENSUSE-SU-2026:11435-1 gd-2.3.3-5.1 on GA media
These are all security issues fixed in the gd-2.3.3-5.1 package on the GA media of openSUSE Tumbleweed...
Injection axios Dependency in Crowd Data Center
This High severity Injection vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.6, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Injection vulnerability, with a CVSS Score of 8.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H allows an unauthenticated attack...
DoS (Denial of Service) axios Dependency in Crowd Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 6.0.0, 6.1.3, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows a...
DoS (Denial of Service) io.netty:netty-codec-http Dependency in Crowd Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an...
DoS (Denial of Service) io.netty:netty-codec Dependency in Crowd Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...