The vulnerabilities of the functions get_eprobe_size() and processFetchInsn() in the kernel/trace/trace_eprobe.c module, which support Linux operating system’s kernel tracing functionality, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of the functions geteprobesize and processFetchInsn in the kernel/trace/traceeprobe.c module, which support kernel tracing in Linux operating systems, are related to pointer manipulation. Exploiting these vulnerabilities could allow an attacker to compromise the confidentialit...

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server lies in the ability to bypass authentication via a user-controlled key, allowing attackers to compromise the integrity of protected information.

The vulnerability of cloud-based software for creating and using Nextcloud Server and Nextcloud Enterprise Server relates to bypassing authentication via a key controlled by the user. Exploiting this vulnerability allows an attacker to potentially compromise the integrity of protected information...

Frigte has broken access control viewer user can delete admin and other users account

Summary Users with the viewer role can delete admin and other users account. It this leads to denial of service and affects data integrity. Details Endpoint DELETE /api/users/admin is enable to anonymous user. PoC I deleted admin user on demo.frigate.video: Impact It this leads to denial of servi...

GHSA-VG28-83RP-8XX4 Frigte has broken access control viewer user can delete admin and other users account

Summary Users with the viewer role can delete admin and other users account. It this leads to denial of service and affects data integrity. Details Endpoint DELETE /api/users/admin is enable to anonymous user. PoC I deleted admin user on demo.frigate.video: Impact It this leads to denial of servi...

EUVD-2026-12657

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

PT-2026-26083

The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.updateAddress function lacks CSRF token validation, enabling malicious websites to forge requests that add, modify, or delete user addresses...

PT-2026-26098

Name of the Vulnerable Software and Affected Versions Frigate versions 0.16.2 and below Description Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Users with the viewer role can delete admin and low-privileged user accounts, potentially leading to...

The vulnerability of the __nilfs_mark inode_dirty() function in the fs/nilfs2/inode.c file of the NILFS2 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nilfsmark inodedirty function in the fs/nilfs2/inode.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

The vulnerability in the drivers/gpu/drm/amd/display/dc/dml/dcn32/dcn32_fpu.c kernel of the Linux operating system allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the drivers/gpu/drm/amd/display/dc/dml/dcn32/dcn32fpu.c kernel of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the hci_conn_unlink() function in the net/bluetooth/hci_conn.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the hciconnunlink function in the net/bluetooth/hciconn.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the smb2_compound_op() function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the smb2compoundop function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-55045

The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The vulnerable cUsers.updateAddress function lacks CSRF token validation, enabling malicious websites to forge requests that add, modify, or delete user addresses...

CVE-2026-3856

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

CVE-2026-3856 IBM Db2 Recovery Expert Missing Integrity Check

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

CVE-2026-3856

Summary : CVE-2026-3856 affects IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2. The issue stems from an insecure mechanism used to verify data integrity during transmission, which could allow an attacker to modify or corrupt data. Affected product and version : IBM Db2 Recovery Expe...

CVE-2026-3856

IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission...

Security Bulletin: CVE-2026-3856 found in IBM Db2 Recovery Expert for Linux, UNIX and Windows v5.5

Summary IBM Db2 Recovery Expert for Linux, UNIX and Windows could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission. Vulnerability Details ID: CVE-2026-3856 DESCRIPTION: IBM DB2 Recovery Expert for Linux, UNIX...

The vulnerabilities of the functions sf_pdma_alloc_desc() and sf_pdma_desc_residue() in the drivers/dma/sf-pdma/sf-pdma.c module of the Linux kernel’s DMA driver software allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions sfpdmaallocdesc and sfpdmadescresidue in the drivers/dma/sf-pdma/sf-pdma.c module of the Linux kernel’s DMA driver lies in the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

EulerOS Virtualization 2.12.1 : grub2 (EulerOS-SA-2026-1429)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the...

EulerOS Virtualization 2.12.0 : grub2 (EulerOS-SA-2026-1486)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the...