CVE-2026-46310

CVE-2026-46310 affects the Linux kernel component media: renesas: vsp1. The vulnerability is a NULL pointer dereference during module unload on Gen 4, caused by cleanup calling vsp1_drm_cleanup() instead of vsp1_vspx_cleanup(). The fix implements an IP version check to call the appropriate DRM or...

MAL-2026-5309 Malicious code in nodemon-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b598671d8b4d96e826035c56685f7064e10dbcf7cf150e7ab4b2bd9194ad9a Package is published as nodemon-lint but its package.json, README, bin name nodemon, homepage nodemon.io, and source tree are a verbatim copy of Remy...

PT-2026-47381

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs when unloading the module on gen 4. This issue is caused by the cleanup code incorrectly calling the vsp1 drm cleanup function instead of the vsp1 vspx...

WordPress plugin Ad Inserter – Ad Manager & AdSense Ads 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2026-36189

A flaw was found in Uncrustify. A local attacker could exploit a buffer overflow vulnerability in the uncrustify executable. This vulnerability, occurring within functions such as checktemplate and tokenizecleanup, could allow the attacker to cause a denial of service DoS, making the application...

CVE-2026-6883

GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user to bypass merge request approval requirements due to improper cleanup of orphaned policy records...

CVE-2026-42186

A flaw was found in OpenBao. When the initial deletion of a namespace fails, subsequent attempts to remove it do not fully clear all associated data before the namespace is marked as deleted. This can result in residual data, such as outstanding leases and unrelated storage entries, not being...

CVE-2026-45212

Missing Authorization vulnerability in Gabe Livan Asset CleanUp: Page Speed Booster wp-asset-clean-up allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asset CleanUp: Page Speed Booster: from n/a through = 1.4.0.3...

CVE-2026-0427

Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine VM to access these shared resources from another Guest VM, potentially resulting in the loss of confidentiality, integrity, or availability...

CVE-2026-43888

Outline is a service that allows for collaborative documentation. Prior to 1.7.0, ZipHelper.extract computes the extraction path for each entry by passing a full filesystem path through trimFileAndExt, a filename helper that calls path.basename on its input when truncating. When a zip entry's...

The vulnerability of the ogs_sbi_xact_add() function, a tool for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogssbixactadd function, a component of the NR/LTE Open5GS mobile network creation and management tool, is related to improper cleaning or release of resources. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the parser for NF-profiles in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.

The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the ogs_pool_id_calloc() function in the library /lib/sbi/nghttp2-server.c, which is used for creating and managing NR/LTE Open5GS mobile networks, allows a attacker to cause a service failure.

The vulnerability of the ogspoolidcalloc function in the library /lib/sbi/nghttp2-server.c, which is used for creating and managing mobile networks like NR/LTE Open5GS, is related to improper cleanup or release of resources. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the parser for NF-profiles in the NR/LTE Open5GS network creation and management tool allows a attacker to cause a service failure.

The vulnerability of the NF-profile parser in the NR/LTE Open5GS network creation and management tool is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

RLSA-2026:21557 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: j1939: j1939sessionnew: fix skb reference counting CVE-2024-56645 kernel: ima: don't clear IMADIGSIG flag when setting or removing non-IMA xattr CVE-2025-68183 kernel: mm: thp: deny...

SUSE CVE-2026-46264

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devmaddactionorreset failure the provided cleanup action will be run immediately on the not yet initialized kobject. This may lead to errors like: kobject: 'null' ff110001393608e0: i...

Progress Software多款产品 命令注入漏洞

Progress Software MOVEit is a product of the American company Progress Software. Progress Software MOVEit is a secure file transfer software. Progress Software LoadMaster is a series of application delivery controllers and load balancing products. Progress Software ECS Connections Manager is a...

The vulnerability of the zipfileInflate function in the SQLite database management system allows attackers to circumvent security restrictions and cause service failures.

The vulnerability of the zipfileInflate function in the SQLite database management system is related to improper cleaning of dynamic memory. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and cause service failures by sending specially crafted smb2 packets...

Node Version Manager 安全漏洞

Node Version Manager is an open-source node version manager developed by nvm.sh. Versions of Node Version Manager prior to 0.40.4 contain security vulnerabilities. These vulnerabilities stem from the ability to execute arbitrary commands from the configured image version string. The functions...

Linux Distros Unpatched Vulnerability : CVE-2026-46264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Fix sysfs initialization In case of devmaddactionorreset failure the provided...