11748 matches found
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: A buffer overflow has been fixed in the liootargetnaclinfoshow function. The function liootargetnaclinfoshow uses sprintf within a loop to print details for each iSCSI connection in a session, without checkin...
Astra Linux – Vulnerability in Qemu
A flaw was discovered in the QEMU disk image utility’s ‘info’ command. A specially crafted image file containing a json: value describing block devices in QMP could cause the qemu-img process on the host to consume large amounts of memory or CPU time, resulting in denial of service or issues with...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: A possible memory leak has been fixed in hpsainitone. The hpdaallocctlrinfo function allocates the h variable and its field replymap. However, in hpsainitone, if allocpercpu fails, hpsainitone jumps directly to clean1...
Astra Linux – Vulnerability in symfony
Symfony is a PHP framework for web and console applications, along with a set of reusable PHP components. Symfony’s HttpFoundation component defines an object-oriented layer for handling HTTP requests. Starting from version 2.0.0 and before versions 5.4.50, 6.4.29, and 7.3.7, the Request class...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: In loopsetstatusfrominfo, the checks for lo-looffset and lo-losizelimit should be performed before reassigning them. This is because if an overflow error occurs, the original correct value will be changed to the wrong value, and ...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: HID: usbhid: fixed an info leak in hidsubmitctrl. In hidsubmitctrl, the way of calculating the report length does not take into account that report-size can be zero. When running the syzkaller reproducer, a report of size 0 cause...
CVE-2026-76172
creationtimestamp| type| source ---|---|--- 2026-08-24 10:11:24+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2uomns22b 2026-09-02 19:33:12+00:00| seen| https://gist.github.com/alon710/af575107e879f298d568b88dd8bac4cb...
CVE-2026-74712
A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...
CVE-2026-66897
creationtimestamp| type| source ---|---|--- 2026-08-24 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f 2026-08-24 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150018844317018 2026-08-24 10:30:29+00:00| seen|...
CVE-2026-68959
creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:31+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjzt2arz2z...
CVE-2026-78255
creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...
CVE-2026-78202
creationtimestamp| type| source ---|---|--- 2026-08-24 08:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2kdunt7esf746 2026-08-24 10:01:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtt2dlmjhv2i...
CVE-2026-78201
creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...
CVE-2025-44810
creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99427 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-78211
creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...
Security update for Multi-Linux Manager Client Tools - Monitoring stack
This update fixes the following issues: golang-github-prometheus-alertmanager: CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266615 golang-github-prometheus-prometheus updated from version 3.5.3 to 3.5.4: Security fixes:...
The vulnerability of the thermal_of.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the thermalof.c component in the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the process_message_header() function in the net/ceph/messenger_v2.c module of the Linux kernel allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...
PT-2026-80994
Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...