ROS-20260923-73-0043

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260923-73-0065

The vulnerability of the nfsfiledirectread function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-4921: Generation of Error Message Containing Sensitive Information

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-62998: Improper Input Validation

REDAXO is a PHP-based content management system. Prior to 5.21.2, rexlist::getSortColumn in redaxo/src/core/lib/list.php accepts the sort request parameter without checking whether setColumnSortable registered the requested column. An authenticated backend user can make prepareQuery add an escape...

CVE-2026-94243: Origin Validation Error

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

PT-2026-97327

Name of the Vulnerable Software and Affected Versions REDAXO versions prior to 5.21.2 Description In this PHP-based content management system, the rex list::getSortColumn function in redaxo/src/core/lib/list.php fails to verify if the requested column was registered via setColumnSortable. An...

ROS-20260923-73-0099

The vulnerability of the drivers/uio/uiohvgeneric.c module in Linux kernels is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260923-73-0084

The vulnerability of the completeemulatedio function in the Linux operating system is related to errors in permission handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0011

The vulnerabilities of the functions nvmettcpbuildpduiovec and nvmettcphandlereqfailure in the driver/nvme/target/tcp.c module of the Linux kernel are related to error handling flaws. Exploiting these vulnerabilities allows a remote attacker to compromise the confidentiality, integrity, and...

ROS-20260923-73-0077

The vulnerability of the fqpiechange function in the net/sched/schfqpie.c module of the network/sched subsystem of the Linux operating system is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0036

The vulnerability of the etmsetupaux function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0033

The vulnerability of the netdevallocskbipalign function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0037

The vulnerability of the platformgetresource function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260923-73-0070

The vulnerability in the drivers/gpu/drm/gma500/oaktrailhdmi.c kernel module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260923-73-0098

The vulnerability of the udfupdatetag function in the Linux operating system is related to memory management errors after memory is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Cisco Secure Firewall Threat Defense (FTD) software-based TLS protocol implementation allows a attacker to cause a service failure.

The vulnerability of the Cisco Secure Firewall Threat Defense FTD software-based TLS protocol implementation is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-86049

A flaw was found in Jupyter Server. The server's logging mechanism for HTTP 500 errors fails to properly redact sensitive information. When a request results in an HTTP 500 error and includes a Referer header containing a security token, this token is written to server logs in plaintext. An...

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...

GHSA-HRMJ-7RVJ-4HG8 lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

Summary The LightRAG API server passes raw Python exception messages directly into HTTP error responses across 30+ error handlers in every router. When combined with the default unauthenticated configuration see companion report on CWE-306, any network-reachable client can trigger exceptions whos...

GHSA-G2R2-3J32-J27X MCP Atlassian: Reflected XSS in OAuth Setup Callback Handler

Summary The OAuth 2.0 setup wizard's local callback HTTP server reflects the error query parameter directly into an HTML response without any sanitization or encoding. An attacker can craft a malicious callback URL containing JavaScript in the error parameter that executes in the victim's browser...