1240 matches found
Rocky Linux 9 [CIQ] Security Update: aardvark-dns / aardvark-dns-debuginfo / aardvark-dns-debugsource (crlsa-2025_7094)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20257094 advisory. containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service CVE-2024-8418 Tenable has extracted the preceding description block...
CVE-2026-92934
A flaw was found in vm2. A remote attacker able to run code within the sandbox can bypass environment isolation by exploiting an error handling flaw that fails to properly sanitize host objects. By accessing these unprotected host objects, an attacker can achieve arbitrary code execution and acce...
ROS-20260929-73-0073
The vulnerability of the pagepoolallocnetmemsslow function in the net/core/pagepool.c module, which is part of the Linux kernel’s networking functions, is related to errors handling flaws. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-94835
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the RDMA/hfi1 component, the function set txreq header ahg fails to check the return value of sdma txinit ahg. When sdma txinit ahg fails, it returns before initializing tx-txreq, but...
Astra Linux – Vulnerability in Samba
A flaw was discovered in the way samba handled file and directory permissions. A authenticated user could exploit this flaw to gain access to certain file and directory information that would otherwise be unavailable to the attacker...
CVE-2026-86060
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS...
Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable
Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, designated GHSA-7g4w-cg88-2cq2 , is rated Critical by Cosmos Labs and was published without a CV...
CVE-2026-75371
An integer handling flaw in the cobsdecode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service DoS via a crafted input...
PT-2026-80991
Name of the Vulnerable Software and Affected Versions SpaceDot AcubeSAT OBC software commit eaf90ec Description An integer handling flaw in the cobs decode function allows physically-proximate attackers with UART access to cause a Denial of Service DoS by providing a crafted input. Recommendation...
CVE-2026-75371: Uncontrolled Resource Consumption
An integer handling flaw in the cobsdecode function of SpaceDot AcubeSAT OBC software commit eaf90ec allows physically-proximate attackers with UART access to cause a Denial of Service DoS via a crafted input...
JLSEC-2026-1143 Issue summary: When an application drives an AES-OCB context through the public EVP_Cipher() one...
Issue summary: When an application drives an AES-OCB context through the public EVPCipher one-shot interface, the application-supplied initialisation vector IV is silently discarded. Impact summary: Every message encrypted under the same key uses the same effective nonce regardless of the IV...
CVE-2026-59648 OpenPGP Argon2 S2K honours attacker-chosen memory and passes
In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attacker-chosen memory and passes. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 1.0.13 1.0.X series, 2.0.13 2.0.X series and 2.1.13 2.1.X series...
Chromium: CVE-2026-17843 Inappropriate implementation in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-63550
The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is received over an established MMS session TCP port 102, the decoder may advance its internal read position incorrectly, leading to a he...
CVE-2026-18197
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Link Library allows Cross-Site Scripting XSS. This issue affects Link Library: before 7.9.4...
CVE-2026-55415
datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema...
CVE-2026-8167
CVE-2026-8167 describes a Reflected XSS vulnerability in THEWP Digital Solutions’ News Theme V8. The issue stems from improper neutralization of input during web page generation , enabling reflected cross-site scripting. Affected product: News Theme V8 (up to 16.06.2026). The documents do not pro...
PT-2026-65530
Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.23.0 QF9 Description Improper neutralization of input during web page generation in the BlackBerry UEM Management Console allows Cross-Site Scripting XSS, a condition where malicious scripts are injected int...
