58875 matches found
CVE-2026-52979 net: psp: check for device unregister when creating assoc
In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc pspassocdevicegetlocked obtains a pspdev reference via pspdevgetforsock which uses pspdevtryget under RCU; it then acquires psd-lock and drops the reference. Before the lo...
CVE-2026-52979
CVE-2026-52979 is a Linux kernel vulnerability in the PSP subsystem. The issue arises in psp_assoc_device_get_locked(): it takes a psp_dev reference via psp_dev_get_for_sock() (which uses psp_dev_tryget() under RCU), then acquires psd->lock and drops the registration reference. If psp_dev_unre...
CVE-2026-56358
creationtimestamp| type| source ---|---|--- 2026-06-24 14:31:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp24yidzsx2r...
CVE-2026-56368
creationtimestamp| type| source ---|---|--- 2026-06-24 14:21:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp24gl6h7e2p...
CVE-2026-56761
creationtimestamp| type| source ---|---|--- 2026-06-24 14:11:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp23unyhat2i...
CVE-2026-56270
creationtimestamp| type| source ---|---|--- 2026-06-24 13:55:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp22xcos3g2f 2026-07-10 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqbxdatcfq26 2026-08-17 09:00:27+00:00| exploited|...
EUVD-2026-38754
n8n before 1.123.25 1.x and before 2.11.2 2.x, with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitization that allows authenticated users to inject malicious scripts. Attackers with workflow creation permissions can injec...
CVE-2026-56351 n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes
n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply...
CVE-2026-56351
n8n before version 2.4.0 contains a sql injection vulnerability in MySQL, PostgreSQL, and Microsoft SQL nodes that allows authenticated users to inject arbitrary SQL through unescaped identifier values in node configuration parameters. Attackers with workflow creation permissions can supply...
CVE-2026-56358
n8n before 1.123.25 1.x and before 2.11.2 2.x, with the fix also included in 2.12.0, contains a stored cross-site scripting vulnerability in the Form Trigger node's CSS sanitization that allows authenticated users to inject malicious scripts. Attackers with workflow creation permissions can injec...
CVE-2026-52936
creationtimestamp| type| source ---|---|--- 2026-06-24 10:36:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozptg2oal2m...
CVE-2026-52927
creationtimestamp| type| source ---|---|--- 2026-06-24 10:17:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozoqr7m7c2m 2026-07-01 02:47:14+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0812 2026-07-06 06:24:36+00:00| seen|...
CVE-2026-52932
creationtimestamp| type| source ---|---|--- 2026-06-24 10:07:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozo6s6jhj2y...
CVE-2026-9721
creationtimestamp| type| source ---|---|--- 2026-06-24 09:16:24+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mozle7e7yj2q...
CVE-2022-28206
creationtimestamp| type| source ---|---|--- 2026-06-24 07:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moze4zc3pd2n...
CVE-2026-12849
creationtimestamp| type| source ---|---|--- 2026-06-24 06:28:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mozbycv5rt25...
CVE-2026-54515
creationtimestamp| type| source ---|---|--- 2026-06-24 00:39:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moyoilsxlk2y 2026-06-29 13:58:37+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgnhh3jnf2d...
EUVD-2026-38636
Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...