163 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: The can: gw: fix OOB heap access in cgwcsumcrc8rel function. The cgwcsumcrc8rel function correctly computes bound-safe indices using calcidx: int from = calcidxcrc8-fromidx, cf-len; int to = calcidxcrc8-toidx, cf-len; int res ...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...
a2grunnerp (>=0.1.0, <=0.1.8), acltoolkit-ad (0.2.2) +984 more potentially affected by CVE-2026-59884 via pyasn1 (>=0.1.7, <=0.6.3)
pyasn1 PYPI version =0.1.7, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.4.0rc1, =0.0.2, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59884 Source advisory: MEND:CVE-2026-59884...
a2grunnerp (>=0.1.0, <=0.1.8), acltoolkit-ad (0.2.2) +984 more potentially affected by CVE-2026-59886 via pyasn1 (>=0.1.7, <=0.6.3)
pyasn1 PYPI version =0.1.7, =0.1.0, =0.4.0, =0.1.1, =0.1.0, =0.4.0rc1, =0.0.2, =0.87.2.dev9, =0.82.3, =0.1.0.dev19, =0.1.0, =0.0.1, =0.0.1, =0.0.2 and more Source cves: CVE-2026-59886 Source advisory: MEND:CVE-2026-59886...
Security update for the Linux Kernel (Live Patch 39 for SUSE Linux Enterprise 15 SP5)
This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.163 fixes various security issues The following security issues were fixed: CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats...
CVE-2026-1946
The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebugravitywritedisconnecthandler function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with...
CVE-2026-1946
The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebugravitywritedisconnecthandler function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with...
PT-2026-57120
The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebu gravitywrite disconnect handler function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with...
CVE-2026-1946: Missing Authorization
The GW AI Website Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gwaiwebugravitywritedisconnecthandler function in all versions up to, and including, 1.0.1. This makes it possible for authenticated attackers, with...
aef-gw (>=0.1.1, <=0.1.15), aero-svo-api (0.2.0) +56 more potentially affected by CVE-2025-71176 via pytest (8.3.2)
pytest PYPI version 8.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - aef-gw =0.1.1, =0.0.6, =0.1.0, =9.0.0, =0.1.2, =0.2.1, =0.5.2, =0.1.32, =1.5.3, =1.5.3, =1.5.16 and more Source cves: CVE-2025-71176 Source advisory...
GHSA-72GW-MP4G-V24J
creationtimestamp| type| source ---|---|--- 2026-06-17 19:41:25+00:00| seen| https://gist.github.com/alon710/e8e930bfaf0a04644c5861c1af92ed10 2026-07-02 16:42:59+00:00| seen| https://gist.github.com/konard/2d84a73c0ff6413bca5b0e79fa90d50e 2026-07-03 13:46:20+00:00| seen|...
CVE-2026-50089 Aqara IAM/SSO Gateway open redirect
The Aqara IAM/SSO Gateway gw-builder.aqara.com provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 6.1 Medium, which can be used to set up a phishing attack...
CVE-2026-50089 Aqara IAM/SSO Gateway open redirect
The Aqara IAM/SSO Gateway gw-builder.aqara.com provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 6.1 Medium, which can be used to set up a phishing attack...
CVE-2026-50087 Aqara IAM/SSO Gateway cross-origin resource sharing
The Aqara IAM/SSO gateway gw-builder.aqara.com exhibits a cross-origin request sharing vulnerability, which is an instance of "CWE-942: Permissive Cross-domain Policy with Untrusted Domains," and has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N 8.2 High...
CVE-2026-50089: URL Redirection to Untrusted Site
The Aqara IAM/SSO Gateway gw-builder.aqara.com provides an open redirect, which is an instance of "CWE-601: URL Redirection to Untrusted Site," with an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 6.1 Medium, which can be used to set up a phishing attack...
CVE-2026-46231 batman-adv: bla: put backbone reference on failed claim hash insert
In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: put backbone reference on failed claim hash insert When batadvblaaddclaim fails to insert a new claim into the hash, it leaked a reference to the backbonegw for which the claim was intended. Call...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the batman-adv module’s failure to release the backbonegw reference when inserting a statement in...
MINI-5PWM-H7GW-WJ32
Bulletin has no description...
CVE-2026-31570: Out-of-bounds Read
In the Linux kernel, the following vulnerability has been resolved: can: gw: fix OOB heap access in cgwcsumcrc8rel cgwcsumcrc8rel correctly computes bounds-safe indices via calcidx: int from = calcidxcrc8-fromidx, cf-len; int to = calcidxcrc8-toidx, cf-len; int res = calcidxcrc8-resultidx, cf-len...