26423 matches found
USN-8033-1 linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Nios II architecture; - Sun Sparc architecture; - User-Mode Linux UML; - x86 architecture; - Block layer subsystem;...
USN-8030-1 linux-gcp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - Nios II architecture; - PA-RISC architecture; - RISC-V architecture; -...
BIT-NGINX-INGRESS-CONTROLLER-2026-24514 ingress-nginx Admission Controller denial of service
A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...
PT-2026-7905
Name of the Vulnerable Software and Affected Versions Yoke versions 0.18.x and earlier Description The Air Traffic Controller ATC component of Yoke lacks proper authentication mechanisms for its webhook endpoints. This allows any pod within the cluster network to send AdmissionReview requests...
Yoke code injection vulnerability
Yoke is a Kubernetes package management tool developed by YokeCD. Versions of Yoke prior to 0.19.0 contained a code injection vulnerability. This vulnerability stemmed from the lack of proper URL validation in the Air Traffic Controller component, allowing users with the authority to create or...
Dell iDRAC Service Module Access Control Vulnerability
The Dell iDRAC Service Module is a lightweight software module developed by the American company Dell. It is designed to enhance the functionality of iDRAC Integrated Dell Remote Access Controller on Dell PowerEdge servers. There were access control vulnerabilities in versions of the Dell iDRAC...
Yoke Access Control Vulnerability
Yoke is a Kubernetes package management tool developed by YokeCD. Versions of Yoke prior to 0.19.0 contained an access control vulnerability. This vulnerability stemmed from the lack of proper authentication mechanisms in the Webhook endpoints of the Air Traffic Controller component, allowing any...
CVE-2026-26056: Improper Control of Generation of Code
Yoke is a Helm-inspired infrastructure-as-code IaC package deployer. In 0.19.0 and earlier, a vulnerability exists in the Air Traffic Controller ATC component of Yoke. It allows users with CR create/update permissions to execute arbitrary WASM code in the ATC controller context by injecting a...
PT-2026-7906
Name of the Vulnerable Software and Affected Versions Yoke versions 0.19.0 and earlier Description Yoke's Air Traffic Controller ATC component contains a flaw that allows users with Custom Resource CR create/update permissions to execute arbitrary WASM code. This is achieved by injecting a...
Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2026-24513, CVE-2026-1580, CVE-2026-24514, CVE-2026-24512)
Summary IBM Cloud Kubernetes Service is affected by multiple Kubernetes Ingress Controller security vulnerabilities. - A user with access to create or update Ingress objects can use the rules.http.paths.path Ingress field to inject configuration into nginx CVE-2026-24512 - The...
KLogic SCADA KASCAD Data Compromise
The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...
KLogic SCADA KASKAD Privilege Escalation File Deletion
The vulnerability of the KLogic SCADA system “KASKAD” virtual controller is related to incorrect external control of the file name or file path. Exploiting this vulnerability can allow a malicious actor to increase their privileges and delete arbitrary files...
KLogic SCADA KASCAD Data Compromise
The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the use of a password hash instead of the actual password for authentication. Exploiting this vulnerability allows an intruder to compromise the confidentiality, integrity, and accessibility of the protected...
KLogic SCADA KASKAD Unauthorized Read Write
The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to the absence of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform unauthorized data reading and writing operations remotely...
KLogic SCADA KASKAD Directory Read
The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller is related to incorrect external manipulation of the file name or file path. Exploiting this vulnerability allows a malicious actor to read arbitrary directories within the operating system remotely...
exynos_clkout_probe Heap Buffer Overflow DoS
The vulnerability of the exynosclkoutprobe function in the drivers/clk/samsung/clk-exynos-clkout.c driver for the Samsung Exynos clock controller in the Linux operating system is related to improper initialization of resources. Exploiting this vulnerability could allow a remote attacker to...
KLogic SCADA KASKAD Unauthorized Access
The vulnerability of the KWebVision web visualization module in the “KASKAD” SCADA system relates to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
KLogic SCADA KASKAD Code Execution
The vulnerability of the KLogic SCADA system “KASKA” lies in an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
CVE-2025-24851
Uncaught exception in the firmware for some 100GbE IntelR Ethernet Controller E810 before version cvl fw 1.7.8.x within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This...
CVE-2026-24885
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, a Cross-Site Request Forgery CSRF vulnerability exists in the ProjectPermissionController within the Kanboard application. The application fails to strictly enforce the application/json Content-Type for the...