Zscaler Client Connector 安全漏洞

The Zscaler Client Connector is a lightweight agent provided by Zscaler Inc. There is a security vulnerability associated with the Zscaler Client Connector, which stems from incorrect startup configurations. This vulnerability may cause a small amount of traffic to go unnoticed in rare instances...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...

Why Aggregate Accuracy Is Inadequate for Evaluating Fairness in Law Enforcement Facial Recognition Systems

Facial recognition systems are increasingly deployed in law enforcement and security contexts, where algorithmic decisions can carry significant societal consequences. Despite high reported accuracy, growing evidence demonstrates that such systems often exhibit uneven performance across demograph...

PT-2026-28805

Name of the Vulnerable Software and Affected Versions cosmic-greeter versions prior to https://github.Com/pop-os/cosmic-greeter/pull/426 Description A Time-of-check Time-of-use TOCTOU race condition exists in cosmic-greeter. This condition can allow an attacker to regain privileges that should ha...

Undertow 环境问题漏洞

Undertow is a web server provided by the Undertow company in the United States. Undertow has an environmental issue vulnerability, which stems from the ability of remote attackers to construct specially crafted requests that lead to header parsing discrepancies, potentially allowing for request...

ROS-20260327-73-0004

Vulnerability in gnupg2 related to incorrect cryptographic signature verification. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

The vulnerability of the scx_ops_bypass() function in the kernel/sched/ext.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the scxopsbypass function in the kernel/sched/ext.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the io_ring_exit_work() function in the io_uring/io_uring.c module of the Linux kernel’s asynchronous input/output interface allows a hacker to cause a service failure.

The vulnerability of the ioringexitwork function in the iouring/iouring.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260327-73-0002

Vulnerability in busybox related to information presentation errors in the user interface. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

firefox: thunderbird: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component...

firefox: thunderbird: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component...

The vulnerability of the mlx5e_init_rep_tx() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mlx5einitreptx function in the drivers/net/ethernet/mellanox/mlx5/core/enrep.c file of the Mellanox Ethernet network adapter support driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause...

syft 安全漏洞

Syft is an open-source CLI tool and Go library developed by Anchore, used to generate Software Bill of Materials SBOMs from container images and file systems. Versions of Syft prior to 1.42.3 contain security vulnerabilities. These vulnerabilities stem from improper cleanup of temporary storage...

The vulnerability of the intel_context_find-active_request() function in the drivers/gpu/drm/i915/gt/intel_context.c module of the DRI support driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the intelcontextfind-activerequest function in the drivers/gpu/drm/i915/gt/intelcontext.c module of the DRI support driver for the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fq_pie_change() function in the net/sched/sch_fq_pie.c module of the network scheduling subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fqpiechange function in the net/sched/schfqpie.c module of the network/sched subsystem of the Linux operating system is related to data processing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the msm_irq_postinstall() function in the drivers/gpu/drm/msm/msm_drv.c file of the DRI support driver for the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the msmirqpostinstall function in the drivers/gpu/drm/msm/msmdrv.c file, a driver for supporting Direct Rendering Infrastructure DRI in the Linux kernel, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ice_misc_intr() function in the drivers/net/ethernet/intel/ice/ice_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icemiscintr function in the drivers/net/ethernet/intel/ice/icemain.c file of the Intel Ethernet network adapter driver in the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `btrfs_clear_buffer_dirty()` function in the `fs/btrfs/extent_io.c` module of the btrfs file system support module in the Linux operating system allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the btrfsclearbufferdirty function in the fs/btrfs/extentio.c module of the Btrfs file system support in Linux’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

The vulnerability of the nest_imc_event_init() function in the arch/powerpc/perf/imc-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the nestimceventinit function in the arch/powerpc/perf/imc-pmu.c module, which is part of the PowerPC platform support for the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hisi_pcie_pmu_offline_cpu() function in the drivers/perf/hisilicon/hisi_pcie_pmu.c driver, a performance monitoring driver for Linux kernels, allows a hacker to cause a service failure.

The vulnerability of the hisipciepmuofflinecpu function in the drivers/perf/hisilicon/hisipciepmu.c driver for monitoring Linux kernel performance is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a system failure...