33140 matches found
K000162994: Node.js vulnerabilities CVE-2026-21712 and CVE-2026-56846
Security Advisory Description CVE-2026-21712 A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process. CVE-2026-56846 A flaw in Node.js HTTP/...
CVE-2026-13405 Royal Elementor Addons < 1.7.1066 - Admin+ Remote Code Execution via Widget Builder
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before writing it to a file that is later executed, allowing users with the manageoptions capability and, on WordPress Multisite, non-super subsite administrators who do not otherwise...
ROS-20260820-73-0001
The vulnerability of the asn1DecodeSnmp function in the CUPS printing server is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service failures...
RHEL 9 : libreswan (RHSA-2026:57741)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:57741 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...
The vulnerability of ECPG clients of the PostgreSQL database management system allows a hacker to cause a service failure.
The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure by sending an incorrect bytea value...
bind: BIND: Denial of Service via specially crafted DNS messages
A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...
bind: bind9: Unexpected exit with NSEC and NSEC3 both present
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...
[SECURITY] [DLA 4706-2] ruby-grape regression update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4706-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 19, 2026 https://wiki.debian.org/LTS -...
CVE-2026-74362
A flaw was found in the Linux kernel's ext2 filesystem. When performing write operations on files opened with OSYNC or ODSYNC flags, the system call write2 could incorrectly report success to a local user even if the data synchronization to disk failed. This could lead to data integrity issues, a...
CVE-2026-72307
A flaw was found in the Linux kernel's mlxsw driver. When the mlxswspvrslpmtreereplace function encounters an error during Virtual Router VR replacement operations, its rollback mechanism fails to correctly release resources. This leads to a reference count leak, where system resources are not...
CVE-2026-72155
A flaw was found in the Linux kernel's mtd: spi-nor: swp component. When a user attempts to unlock specific blocks on a Serial Peripheral Interface SPI NOR flash device, particularly those at the beginning of the device, the operation may fail. This occurs due to an incorrect calculation of the...
CVE-2026-50720
The Ingenic T31 SoC boot ROM flash-boot verification path compares only a single 32-bit word of the RSA signature output against a single 32-bit word of the SHA-256 payload digest, rather than compare the full data. This allows an attacker with physical write access to boot media to forge modifie...
ROS-20260819-73-0027
The vulnerability in Vim relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260819-73-0031
The vulnerability in Vim relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260819-73-0006
The vulnerability in gobgp is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow attackers to cause service failures...
ROS-20260819-73-0045
The vulnerability in containerd is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260819-73-0052
The vulnerability in Tomcat11 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...
ROS-20260819-73-0055
The vulnerability in Tomcat11 is related to deficiencies in handling error situations. Exploiting this vulnerability can allow a malicious actor to cause service failures...