CVE-2026-31830

sigstore-ruby is a pure Ruby implementation of the sigstore verify command from the sigstore/cosign project. Prior to 0.2.3, Sigstore::Verifierverify does not propagate the VerificationFailure returned by verifyintoto when the artifact digest does not match the digest in the in-toto attestation...

CVE-2026-2231

The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web script...

CVE-2025-55264 HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change

HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despite the password change leading to account takeover...

SUSE-SU-2026:1074-1 Security update for nghttp2

This update for nghttp2 fixes the following issues: - CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS bsc1259845...

Protection Mechanism Failure

github.com/envoyproxy/envoy is vulnerable to Protection Mechanism Failure. The vulnerability is due to accepting and forwarding client data before a successful 2xx response in TCP proxy mode, which allows an attacker to cause desynchronization when upstream proxies reject the CONNECT request...

SUSE-SU-2026:20870-1 Security update for nghttp2

This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS bsc1259845...

Security update for nghttp2

This update for nghttp2 fixes the following issues: CVE-2026-27135: Assertion failure due to missing state validation can lead to DoS bsc1259845. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

PT-2026-28362

Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. The ISO15118 chargerImpl::handle session setup function uses the v2g ctx variable after it has been freed when ISO15118 initialization fails, such as whe...

Vienna Symphonic Library Vienna Assistant 安全漏洞

Vienna Symphonic Library Vienna Assistant is a music sampling library download and management tool provided by Vienna Symphonic Library. There is a security vulnerability in Vienna Symphonic Library Vienna Assistant, which stems from the lack of client validation and endpoint validation. This...

The vulnerability of the create_log_context() function in the drivers/md/dm-log.c file of the support for multiple device types (RAID and LVM) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the createlogcontext function in the drivers/md/dm-log.c file of the support for multiple device types RAID and LVM in the Linux kernel is related to insufficient data authentication checks. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerabilities of the functions qla4xxx_set_chap_entry() and qla4xxx_iface_set_param() in the driver module drivers/scsi/qla4xxx/ql4_os.c of the Linux SCSI device driver module allow a hacker to cause a service failure.

The vulnerabilities of the functions qla4xxxsetchapentry and qla4xxxifacesetparam in the driver module drivers/scsi/qla4xxx/ql4os.c of the Linux SCSI device driver involve reading memory beyond the allocated buffer. Exploiting these vulnerabilities could allow an attacker to cause a service failu...

The vulnerability of the __cpu_map_ring_cleanup() function in the kernel/bpf/cpumap.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cpumapringcleanup function in the kernel/bpf/cpumap.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect code validation for function return operations. Exploiting this vulnerability could allow an attacker to trigger a service...

The vulnerability of the alloc_wbufs() function in the fs/ubifs/super.c file of the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the allocwbufs function in the fs/ubifs/super.c file of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_flock() function in the fs/cifs/file.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the cifsflock function in the fs/cifs/file.c module of the Linux kernel file system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the add_mtd_device() function in the drivers/mtd/mtdcore.c file of the MTD memory driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the addmtddevice function in the drivers/mtd/mtdcore.c file of the MTD memory driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mlx5_esw_vport_disable() function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5eswvportdisable function in the drivers/net/ethernet/mellanox/mlx5/core/eswitch.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the `bitmap_ip_create()` function in the `net/netfilter/ipset/ip_set_bitmap_ip.c` module of the `netfilter` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bitmapipcreate function in the net/netfilter/ipset/ipsetbitmapip.c module of the netfilter component in the Linux operating system’s kernel is related to the use of insufficiently random values. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the lpuart_set_termios() function in the drivers/tty/serial/fsl_lpuart.c file of the console TTY driver in the Linux kernel’s serial port layer allows a attacker to cause a service failure.

The vulnerability of the lpuartsettermios function in the drivers/tty/serial/fsllpuart.c file of the console TTY driver in the Linux kernel’s serial port layer is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the acpi_ffh_address_space_arch_setup() function in the arch/arm64/kernel/acpi.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the acpiffhaddressspacearchsetup function in the arch/arm64/kernel/acpi.c module of the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `cs35l41_get_acpi_mute_state()` function in the sound subsystem of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cs35l41getacpimutestate function in the sound/hda/codecs/side-codecs/cs35l41hda.c module of the Linux kernel sound subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...