506168 matches found
The vulnerability of the MmMapIoSpace() function in the ThrottleBlood.sys driver allows a hacker to escalate their privileges, execute arbitrary code, or cause a service failure.
The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-74661
A flaw was found in the mac802154 component of the Linux kernel. This use-after-free vulnerability allows a local attacker to potentially cause a system crash denial of service or execute arbitrary code. The issue arises when the beacon worker attempts to access memory that has already been freed...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
CVE-2026-74591
A flaw was found in the Linux kernel. A race condition in the filemapaddfolio function, responsible for managing memory pages, can occur during specific memory allocation retries. If another process resolves a memory conflict while the current operation is paused, an incorrect memory address migh...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
CVE-2026-74727
A flaw was found in the Linux kernel's ovpn module. A race condition can occur when an OpenVPN ovpn peer is removed concurrently while the system attempts to rehash it. This can lead to the peer being re-inserted into internal tables after it has been logically removed, creating a Use-After-Free...
CVE-2026-74669
A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...
CVE-2026-74606
A flaw was found in the Linux kernel's eventfs component. The eventfsremoverec function contains a use-after-free vulnerability where it attempts to access memory after it has been deallocated. This can occur during recursive removal of child entries. A local attacker could exploit this flaw to...
CVE-2026-61898
A flaw was found in accountsservice. A local attacker can exploit this by injecting arbitrary shell commands into the user-controlled LANGUAGE entry in the /.pamenvironment file. The Ubuntu-specific language helper scripts process this input unescaped, leading to arbitrary code execution with roo...
Important: Red Hat Security Advisory: python-urwid security update
An update for python-urwid is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
urwid: Urwid: Predictable session IDs lead to remote code execution and information disclosure
A flaw was found in the urwid web display backend. This vulnerability arises from the use of a cryptographically insecure pseudo-random number generator PRNG for web session identifiers, making them predictable. An attacker could either observe enough session IDs to reconstruct the PRNG state or,...
CVE-2026-78314
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78316
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78315
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
CVE-2026-78317
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution...
Vulnerabilities present in Atlassian products
Atlassian has hidden vulnerabilities in various products such as Bamboo, Bitbucket, Confluence, Jira, Crowd, and Fisheye. These vulnerabilities exist in various third-party products for which updates have already been released. Atlassian has incorporated these updates into its own products...
