97857 matches found
CVE-2026-98327
A flaw was found in the Linux kernel's mac80211 wireless mesh networking subsystem. When leaving or stopping a mesh network while a Channel Switch Announcement CSA is still pending, the kernel fails to reset the switch state and release allocated memory. A local privileged user could exploit this...
CVE-2026-98325
A flaw was found in the Linux kernel's mac80211 wireless subsystem. Transmission control information within packet buffers was not initialized early enough, preventing proper cleanup and error reporting if header construction or buffer resizing fails. A local user could exploit this flaw during...
CVE-2026-98324
A flaw was found in the Linux kernel's PXA Direct Memory Access DMA driver. A local user could trigger a Denial of Service DoS or memory corruption due to descriptor double-counting during allocation. When processing hardware descriptors, the driver incorrectly increments the descriptor counter,...
CVE-2026-98323
A flaw was found in the Linux kernel's Software iWARP siw Remote Direct Memory Access RDMA driver. When handling extended protocol headers split across multiple network packets, the driver incorrectly calculates the remaining length during the copy operation, leading to an out-of-bounds memory...
Denial Of Service (DoS)
github.com/jhaals/yopass is vulnerable to denial of service DoS. The vulnerability is due to the use of attacker-controlled HTTP method values as metric labels without validation, which allows an unauthenticated remote attacker to create numerous unique metric series, causing excessive memory...
CVE-2026-98321
A flaw was found in the Linux kernel's netfilter subsystem. When registering Network Address Translation NAT hooks, failure handling during entry insertion does not properly unregister and release allocated hooks. A local attacker could exploit this flaw to cause a memory leak, potentially leadin...
CVE-2026-98320
A flaw was found in the Linux kernel's netfilter subsystem. In the flowtable component, connection tracking reference counts are prematurely released before flow entries are fully removed from memory. An attacker could exploit this timing issue during network flow processing, triggering a...
CVE-2026-98317
A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...
SUSE CVE-2026-61801
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
CLEANSTART-2026-WB32987 denial-of-service (DoS) vulnerability exists in google
CVE-2026-0994 affects multiple packages. A denial-of-service DoS vulnerability exists in google. See references for individual vulnerability details...
CLEANSTART-2026-KZ87014 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
CVE-2026-91777 affects multiple packages. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. See references for individual vulnerability details...
CLEANSTART-2026-IR60609 Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS)
Security vulnerability affects the apache-nifi package. Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS...
CLEANSTART-2026-FS57151 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
Security vulnerability affects the apache-nifi package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
Linux Distros Unpatched Vulnerability : CVE-2026-106436
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an...
Linux Distros Unpatched Vulnerability : CVE-2026-106432
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4...
Linux Distros Unpatched Vulnerability : CVE-2026-108106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large...
Linux Distros Unpatched Vulnerability : CVE-2026-106428
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed...
Linux Distros Unpatched Vulnerability : CVE-2026-106429
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This ca...
Linux Distros Unpatched Vulnerability : CVE-2026-106433
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document...
