ROS-20260918-73-0004

The vulnerability of the getsregs2 function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...

CVE-2025-1350: Generation of Error Message Containing Sensitive Information

IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2026-93019: Unsigned to Signed Conversion Error

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tgapaletteread. The reader unpacks the two-byte colour map length into a signed short, so a length of 32768 or more becomes negative. tgapaletteread casts that value to sizet and asks...

CVE-2026-1030: Generation of Error Message Containing Sensitive Information

IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...

CVE-2026-92702: Origin Validation Error

Cocos AI is a confidential computing system for AI. In Cocos AI 0.8.2 and earlier, VerifyAttestationReportTLS in the AMD SEV-SNP verifier sets Policy.ReportData only when its caller supplies non-empty expected reportData. A relying-party integration that passes nil or empty expected reportData...

ROS-20260918-73-0006

The vulnerability of the pcislottrylock function in the drivers/pci/pci.c file of the Linux operating system’s PCI device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrit...

PT-2026-95405

Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 FP7 IBM Controller versions 11.1.0 through 11.1.3 FP1 Description A remote attacker can obtain sensitive information when the system returns detailed technical error messages in the browser. This...

PT-2026-95661

Name of the Vulnerable Software and Affected Versions CordysCRM versions 1.7.0 through 1.7.3 Description An authenticated user with MODULE SETTING UPDATE permissions can execute arbitrary database functions via the POST /account-pool/page endpoint. This occurs because the...

PT-2026-95499

Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0 Description Semantic MediaWiki is an open-source extension for MediaWiki used for storing and querying data. The software fails to apply sufficient output-context encoding when the value parameter is...

Linux Distros Unpatched Vulnerability : CVE-2026-93116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: asus-wmi: fix resource leaks on probe failure During driver initialization in asuswmiadd, various subsystems are registered sequentially. However,...

FreeBSD ioctl TIOCSCTTY Privilege Escalation

The vulnerability of the ioctl request handler TIOCSCTTY in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

FreeBSD ioctl Privilege Escalation

The vulnerability of the ioctl request handler FIOSSHMLPGCNF in FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260918-73-0077

The vulnerability of the efivarentryget function in the fs/efivarfs/vars.c file of the Linux kernel file system is related to deficiencies in error handling. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux Distros Unpatched Vulnerability : CVE-2026-93155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: keembay - Fix AEAD unregister count in error path registeraesalgs registers the AEAD algorithms before registering the skcipher algorithms. If skcipher...

Linux Distros Unpatched Vulnerability : CVE-2026-93037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/hfi1: Propagate sdmatxinitahg errors settxreqheaderahg ignores the return value of sdmatxinitahg. If sdmatxinitahg fails, it returns before initializing...

Linux Distros Unpatched Vulnerability : CVE-2026-93158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: sa2ul - stop probe if context pool creation fails saulprobe calls sainitmem to create the DMA pool used for security context buffers, but ignores its...

Linux Distros Unpatched Vulnerability : CVE-2026-92501

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: drain in-flight DIO before buffered write fallback generic/746 started failing intermittently on ext3 no-extent inodes. The test triggers 'Page cache...

EulerOS 2.0 SP10 : perl-DBI (EulerOS-SA-2026-3711)

According to the versions of the perl-DBI packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL...

EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3785)

According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the soupbodyinputstreamreadchunked functio...

ROS-20260918-73-0045

The vulnerability of the seg6buildstate function in the net/ipv6/seg6iptunnel.c module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...