91149 matches found
CVE-2026-90232 amt: Don't support cross-netns setup.
In the Linux kernel, the following vulnerability has been resolved: amt: Don't support cross-netns setup. When a lower device is unregistered, amtdeviceevent tries to unregister its upper AMT device, but it has two problems. 1. amtlookupupperdev looks up an upper device in the lower device's netn...
CVE-2026-90232
CVE-2026-90232 affects the AMT (Advanced Multi Tenancy) network driver in the Linux kernel. When an AMT upper device is created on a lower device in a different network namespace (cross-netns), removing that lower device causes amt_device_event() to fail: it only searches for upper devices in the...
CVE-2026-90232
In the Linux kernel, the following vulnerability has been resolved: amt: Don't support cross-netns setup. When a lower device is unregistered, amtdeviceevent tries to unregister its upper AMT device, but it has two problems. 1. amtlookupupperdev looks up an upper device in the lower device's netn...
@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @apifactory/openapi-builder (>=1.0.0, <=1.0.5) +8 more potentially affected by CVE-2026-63225 via @redocly/cli (>=1.0.0-beta.123, <=1.34.5)
@redocly/cli NPM version =1.0.0-beta.123, =2.13.1, =1.0.0, =0.2.2-next-20230413194207, =1.0.0, =1.3.33, =8.0.1-fix-binary-778dccce.0, =1.2.13, =2.15.5, =2.16.3 Source cves: CVE-2026-63225 Source advisory: OSV:GHSA-657C-G7QC-R9J2...
@acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94), @apifactory/openapi-builder (>=1.0.0, <=1.0.5) +8 more potentially affected by CVE-2026-63225 via @redocly/cli (>=1.0.0-beta.123, <=1.34.5)
@redocly/cli NPM version =1.0.0-beta.123, =2.13.1, =1.0.0, =0.2.2-next-20230413194207, =1.0.0, =1.3.33, =8.0.1-fix-binary-778dccce.0, =1.2.13, =2.15.5, =2.16.3 Source cves: CVE-2026-63225 Source advisory: GHSA-657C-G7QC-R9J2...
CVE-2026-82760
Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...
Exploit for Command Injection in Microsoft
CVE-2026-49179: Active Directory WriteSPNScript Command Inject...
CGA-VPQW-XWM4-VR85
Bulletin has no description...
CGA-49FM-VH64-VW49
Bulletin has no description...
CGA-5C5Q-XX5H-6RR6
Bulletin has no description...
CGA-5CG3-7WW4-384F
Bulletin has no description...
CGA-MWJ6-5X9R-XMXM
Bulletin has no description...
CGA-4MCQ-7V5X-PQPV
Bulletin has no description...
EUVD-2026-81478
Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...
EEF-CVE-2026-82760 Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in
Summary Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument in...
CVE-2026-82760
AshAuthentication (Elixir library by team-alembic) is vulnerable to CPU and memory exhaustion via superlinear base62 decoding in the API key sign-in flow. The root cause is in AshAuthentication.Base.decode62/1, which recomputes Integer.pow(62, index) at every character position instead of accumul...
CVE-2026-82760 Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in
Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...
CVE-2026-82760 Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in
Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...
CVE-2026-82760
Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...
CVE-2026-82760 Superlinear base62 decoding exhausts CPU and memory in AshAuthentication API key sign-in
Inefficient Algorithmic Complexity vulnerability in team-alembic AshAuthentication allows an unauthenticated attacker to exhaust CPU and memory via an oversized base62 segment in a submitted API key. AshAuthentication.Base.decode62/1 in lib/ashauthentication/base.ex splits its argument into one...