311797 matches found
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
CVE-2026-16047 Board channel linking without read channel permission validation
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to validate that users have read access to a channel before linking a board to it, which allows an authenticated attacker to discover the membership of private channels on the same team via creating, patching, importing...
CVE-2026-16047
Mattermost versions 11.7.x ≤ 11.7.6, 10.11.x ≤ 10.11.21, and 11.8.x ≤ 11.8.3 contain an authorization flaw in the board-to-channel linking functionality. The server fails to verify that the requesting user has read access to a target channel before associating a board with it. An authenticated us...
EUVD-2026-60208
Mattermost versions 11.7.x = 11.7.6, 10.11.x = 10.11.21, 11.8.x = 11.8.3 fail to validate that users have read access to a channel before linking a board to it, which allows an authenticated attacker to discover the membership of private channels on the same team via creating, patching, importing...
CVE-2026-59911
Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-59909
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-56089
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-74500
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture USB audio driver, specifically affecting RME Digiface devices. An unprivileged local user could exploit this vulnerability by reading the device status, which, due to an uninitialized buffer, may expose sensitive kernel...
EUVD-2026-60204
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-56089
Dell ObjectScale (versions prior to 4.3.0.1) has a Path Traversal vulnerability. A low-privileged local attacker can exploit it to read arbitrary files, causing information disclosure . CVSS 3.3 (Low) limits impact to confidentiality only. Dell's DSA-2026-328 advisory documents the fix; upgrading...
CVE-2026-56089
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-56089
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-59911
Dell ObjectScale versions prior to 4.3.0.1 have an Insertion of Sensitive Information into Log File flaw in the svc_tools component. A low-privileged, locally authenticated attacker can read sensitive data written to logs, causing information disclosure (CVSS 5.5, medium). No exploitation details...
CVE-2026-59911
Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-60203
Dell ObjectScale, versions prior to 4.3.0.1, contains an Insertion of Sensitive Information into Log File vulnerability in the svctools. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-59909
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
EUVD-2026-60202
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-59909
Dell ObjectScale versions before 4.3.0.1 have a Path Traversal flaw exploitable by a low-privileged local attacker, enabling information tampering (CVSS 7.1, HIGH). Upgrade to 4.3.0.1 or later; Dell advisory DSA-2026-328 provides details. No exploitation evidence provided.
CVE-2026-70412
creationtimestamp| type| source ---|---|--- 2026-08-17 13:47:19+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mtbtoejirt2o 2026-08-17 14:06:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jyn2go5y64m3t...
CVE-2026-74578
A flaw was found in the Linux kernel's algifskcipher cryptographic module. An unprivileged local user could exploit a race condition in the asynchronous I/O AIO path, where a concurrent operation overwrites the Initialization Vector IV used by an in-flight cryptographic request. This IV reuse...