50771 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding ipv6srhrcv runs with skb-data at the Segment Routing Header SRH while skbnetworkheader points at the IPv6 header. When segmentsleft 0, ipv6srhrcv previously restored...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskbnetworkmaypull for transmitting network layer headers In vxlanxmit, arpreduce, and vxlanmdbentryskbget, pskbmaypull was being called to verify the availability of network layer headers ARP, IPv6/ND, IP/IPv6 MDB key...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 “net/packet: tpacketrcv: avoid a producer race condition” added rxownermap and made tpacketrcv claim a V1 or V2 ring slot before converting the virtio-net header...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6findhdr return an offset past the packet end ipv6findhdr walks the extension header chain, skipping each header by the length that header itself declares. ipv6optlen returns up to 2048, and the skip is never...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: gve: Fixed header buffer corruption with header-split and HW-GRO. The DQO RX datapath programs the headerbufaddr for each buffer-queue-descriptor at the post-time, and reads the split header back at the completion time. Both t...
Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18
In the Linux kernel, the following vulnerability has been resolved: net: prestera: validate firmware header length presterafwhdrparse reads the firmware header before checking that the firmware image contains that header. Reject images shorter than struct presterafwheader before decoding the magi...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb realloc on RX pskbmaypull in batadvinterfacerx could reallocate the buffer behind the skb. Variables which were pointing to the old buffer need to be reassigned to avoid an...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of the numdests header Before accessing the numdests field of the struct batadvtvlvmcasttracker, it was attempted to check whether there is enough space in the network header. However, instead of...
CVE-2026-92693
A flaw was found in FastNetMon. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS or potentially disclose memory contents. By sending a crafted network packet record containing a truncated IPv6 fragment header, an attacker triggers an out-of-bounds memo...
CVE-2026-73856
A flaw was found in ModSecurity, which can lead to information disclosure. The web application firewall evaluates HTTP response Content-Type headers case-sensitively against configured rules, causing mixed-case media types to bypass response body inspection. An unauthenticated remote attacker can...
MappedImagesDetector
MappedImagesDetector Native Windows memory scanner for detecting malicious DLL injections and in-memory malware MappedImagesDetector is a low-level C++20 Windows tool designed to detect malicious DLL injection techniques used by modern malware, including manual-mapped DLLs, erased PE headers, and...
CVE-2026-107492
This CVE ID is rejected or withdrawn by its CVE Numbering Authority and does not represent an active vulnerability entry.
CVE-2026-57488
A flaw was found in pupnp. An integer truncation vulnerability in the HTTP parser allows an adjacent network attacker to cause a Denial of Service DoS. When processing the Content-Length header on 64-bit systems, large integer values can truncate or wrap, causing the parser to miscalculate the...
CVE-2026-113431: ninenines cowlib: Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote…
Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote peer to exhaust the memory of an HTTP/2 endpoint via HPACK-indexed header fields. cowhttp2machine:headersdecode/4 in src/cowhttp2machine.erl decodes every HEADERS block with...
CVE-2026-120415
undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect interceptor strips sensitive headers such as Authorization, Cookie, Proxy-Authorization, and Host when a request is redirected to a different origin, but when request headers are supplied...
UBUNTU-CVE-2026-120415
undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect interceptor strips sensitive headers such as Authorization, Cookie, Proxy-Authorization, and Host when a request is redirected to a different origin, but when request headers are supplied...
CVE-2026-120415: undici: undici is an HTTP client for Node.js
undici is an HTTP client for Node.js. In versions 7.0.0 through 7.30.1 and 8.0.0 through 8.12.3, the redirect interceptor strips sensitive headers such as Authorization, Cookie, Proxy-Authorization, and Host when a request is redirected to a different origin, but when request headers are supplied...
UBUNTU-CVE-2026-55458
Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.5, the reverse proxy's finalizeResponse method in modules/caddyhttp/reverseproxy/reverseproxy.go handles an upstream 101 Switching Protocols response before running removeConnectionHeaders and the hopHeaders deletion...
CVE-2026-112340: wazuh wazuh-dashboard-plugins: Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows…
Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass vulnerability that allows authenticated dashboard users to override the Manager API Authorization header via the /api/request proxy endpoint. Attackers can supply nested body.headers.Authorization values that replace...