7140 matches found
CVE-2026-22909
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...
CVE-2026-22916
An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration...
CVE-2026-22916
An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration...
EUVD-2026-2820
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...
CVE-2026-22909
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...
CVE-2026-22909
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...
CVE-2026-22909
Technical details about CVE-2026-22909 are not publicly detailed in the provided documents. Monitor for updates from sources like NVD, Red Hat, and vendor PSIRTs for affected products, versions, and fixes.
PT-2026-2990
Name of the Vulnerable Software and Affected Versions versions prior to 2026 Description Certain system functions may be accessed without proper authorization. This could allow attackers to start, stop, or delete installed applications, potentially disrupting system operations. Recommendations At...
SICK TDC-X401GL has security vulnerabilities
The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability. This vulnerability arises from the possibility that low-privilege attackers could trigger critical system functions, potentially leading to service interruptions...
SICK TDC-X401GL has security vulnerabilities
The SICK TDC-X401GL is a edge computing gateway developed by the German company SICK. The SICK TDC-X401GL has a security vulnerability. This vulnerability stems from certain system functions that can access resources without proper authorization, potentially allowing attackers to initiate, stop, ...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003200)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003200 advisory. The biomapuseriov and biounmapuser functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002072)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002072 advisory. The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service memory consumption by triggering a large number of...
SvelteKit security vulnerabilities
SvelteKit is an open-source web development framework developed in Svelte. Versions 2.49.0 to 2.49.4 of SvelteKit contain security vulnerabilities. These vulnerabilities stem from improper handling of special payloads by experimental form-based remote functions, which may lead to a memory...
PT-2026-3024
Name of the Vulnerable Software and Affected Versions Omnispace Agora Project versions prior to 25.10 Description A file upload issue exists in Omnispace Agora Project. Attackers can potentially execute code by uploading a specially crafted PDF file. This is possible through the MSL engine of the...
UBUNTU-CVE-2025-71125
In the Linux kernel, the following vulnerability has been resolved: tracing: Do not register unsupported perf events Synthetic events currently do not have a function to register perf events. This leads to calling the tracepoint register functions with a NULL function pointer which triggers:...
CVE-2026-22212
TinyOS versions up to and including 2.1.2 contain a stack-based buffer overflow vulnerability in the mcp2200gpio utility. The vulnerability is caused by unsafe use of strcpy and strcat functions when constructing device paths during automatic device discovery. A local attacker can exploit this by...
CVE-2025-68792
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...
AZL-74495 CVE-2025-68780 affecting package kernel for versions less than 6.6.121.1-1
In the Linux kernel, the following vulnerability has been resolved: sched/deadline: only set freecpus for online runqueues Commit 16b269436b72 "sched/deadline: Modify cpudl::freecpus to reflect rd-online" introduced the cpudlset/clearfreecpu functions to allow the cpudl::freecpus mask to be...
CVE-2025-68792 tpm2-sessions: Fix out of range indexing in name_size
In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in namesize 'namesize' does not have any range checks, and it just directly indexes with TPMALGID, which could lead into memory corruption at worst. Address the issue by only processing...