23727 matches found
Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
...
PT-2026-48427
Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.568 Jenkins LTS versions prior to 2.555.3 Description Secrets provided via POST config.xml submissions are stored unencrypted in job configuration files on the Jenkins controller. This allows users with Item/Extende...
CVE-2025-10237: Use of a Broken or Risky Cryptographic Algorithm
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions...
cve-2026-41856 - HIGH - Spring GraphQL Annotation Detection Vulnerability
cve-2026-41856 - HIGH - Spring GraphQL Annotation Detection Vulnerability...
Lenovo ThinkPad 加密问题漏洞
The Lenovo ThinkPad is a portable computer by the company Lenovo. The Lenovo ThinkPad has an encryption vulnerability, which stems from issues with the embedded controller firmware. This vulnerability may allow privileged local users to perform arbitrary read and write operations on privileged...
CVE-2026-49821: Unintended Proxy or Intermediary
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's buildermgr controller processed Package CRDs without verifying that Package.spec.environment.namespace matched...
Incorrect Authorization
Overview org.springframework.graphql:spring-graphql is a GraphQL Support for Spring Applications Affected versions of this package are vulnerable to Incorrect Authorization via annotation resolution for @Controller data fetchers in Spring GraphQL. An attacker can bypass authorization checks when...
CVE-2026-53442: Missing Encryption of Sensitive Data
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not encrypt secrets from POST config.xml submissions before storing them in job configurations unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission, or access to t...
PT-2026-48430
Name of the Vulnerable Software and Affected Versions ThinkPad embedded controller firmware affected versions not specified Description An issue exists in the embedded controller firmware that allows a privileged local user to perform arbitrary reads or writes to privileged memory regions...
Jenkins 安全漏洞
Jenkins is an open-source application developed by Jenkins Project. The open-source automation server Jenkins offers hundreds of plugins to support building, deploying, and automating any project. Jenkins versions 2.567 and earlier, as well as LTS 2.555.2 and earlier, have security vulnerabilitie...
CLDAP Analyzer with ASN.1 BER Encoding and Basic TLV Response Parser
This Python script implements a CLDAP Connectionless LDAP analyzer that builds and sends LDAP CLDAP discovery requests and parses responses using ASN.1 BER encoding and a basic TLV parser. It constructs a structured LDAP search request including DnsDomain, User, and NtVer filters, sends it over U...
CVE-2026-44805
Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...
CVE-2026-44805
CVE-2026-44805: Use-after-free in Windows Network Controller (NC) Host Agent enables an authorized local attacker to cause denial of service. Affected component is the Windows Network Controller Host Agent; underlying cause is use-after-free. CVSSv3.1 base score 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I...
EUVD-2026-35746
Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...
CVE-2026-44805 Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
...
CVE-2026-44805 Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
...
USN-8412-1 qemu vulnerabilities
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU incorrectly handled certain responses from an iSCSI server. A remote attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary...
USN-8412-1: QEMU vulnerabilities
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU incorrectly handled certain responses from an iSCSI server. A remote attacker could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary...
