79116 matches found
Important: Red Hat Security Advisory: ovn25.09 security update
An update for ovn25.09 is now available for Fast Datapath for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
ovn: ovn: Heap Over-Read in ICMP Error Response Generation
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length iptotlen for IPv4, ip6plen for IPv6 without validating it against the actual packet buffer size...
ovn: ovn: Heap Over-Read in ICMP Error Response Generation
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length iptotlen for IPv4, ip6plen for IPv6 without validating it against the actual packet buffer size...
ovn: ovn: Heap Over-Read in ICMP Error Response Generation
When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-declared total length iptotlen for IPv4, ip6plen for IPv6 without validating it against the actual packet buffer size...
EDAC/mc: Fix error path ordering in edac_mc_alloc()
...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error via the reuse of an easy handle in HTTP requests when a custom Host: header is set for the initial request and omitted in a subsequent one. An attacker can obtain cookies intended for a different host by exploiti...
MongoDB Server 数字错误漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a numerical error vulnerability in MongoDB Server, where the MD5 checks...
PT-2026-51870
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Two error handling issues exist within the drm/xe graphics driver in the xe exec queue create ioctl function. The first issue occurs when xe hw engine group add exec queue fails; the err...
The vulnerability of the vxlan_flagattr_error() function in the Linux operating system’s kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vxlanflagattrerror function in the Linux kernel module is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the zswap_writeback_entry() function in the mm/zswap.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.
The vulnerability of the zswapwritebackentry function in the mm/zswap.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sk_stream_kill_queues() function in the Linux operating system allows a hacker to compromise the accessibility of protected information.
The vulnerability of the skstreamkillqueues function in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
Acronis Cyber Protect Cloud Agent和Acronis DeviceLock DLP 缓冲区错误漏洞
Acronis Cyber Protect Cloud Agent and Acronis DeviceLock DLP are both products of the Swiss company Acronis. Acronis Cyber Protect Cloud Agent is a cloud-based agent. Acronis DeviceLock DLP is a terminal security protection system designed to control peripheral access and prevent data breaches...
FreeRTOS-Plus-TCP 缓冲区错误漏洞
FreeRTOS-Plus-TCP is an extensible, open-source TCP/IP stack designed for use with FreeRTOS. Versions prior to V4.2.6 and V4.4.1 of FreeRTOS-Plus-TCP contained a buffer error vulnerability. This vulnerability stemmed from insufficient validation of the prefix length field during IPv6 router...
The vulnerability of the hswep_has_limit_sbox() function in the arch/x86/events/intel/uncore_snbep.c module, which is part of the Linux kernel support for x86 processors, allows a hacker to trigger a service failure.
The vulnerability of the hswephaslimitsbox function in the arch/x86/events/intel/uncoresnbep.c module of the Linux kernel’s x86 platform is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the fsverity_ioctl_enable() function in the fs/verity/enable.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fsverityioctlenable function in the fs/verity/enable.c file of the Linux kernel file system is related to initialization errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux Distros Unpatched Vulnerability : CVE-2026-31654
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: mm/vma: fix memory leak in mmapregion commit 605f6586ecf7 mm/vma: do not leak memory when...
CVE-2026-29971
A reflected cross-site scripting XSS vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser via the ftpBack...
Exploit for CVE-2026-42208
LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduct...
JLSEC-2026-284
A flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library...
UBUNTU-CVE-2026-41603
Rejected reason: This CVE ID is Rejected and will not be used. The record incorrectly described the affected language binding and fixed version. Use CVE-2026-66053, which was assigned to the vulnerability...