SUSE CVE-2026-74694

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

Debian dsa-6461 : thunderbird - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6461 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6461-1 [email protected] https://www.debian.org/securit...

Debian dsa-6460 : openjdk-25-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6460 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6460-1 [email protected] https://www.debian.org/securit...

CVE-2026-78122

docker-socket-proxy (Tecnativa) through 0.5.0 has an insufficient access control granularity flaw in the /containers Docker API namespace. When the CONTAINERS environment variable is set, read endpoints (/containers/{id}/archive, /export, /logs, /top) are not properly gated, allowing an unauthent...

CVE-2026-16865

creationtimestamp| type| source ---|---|--- 2026-08-22 22:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtpbwnygjx24...

CVE-2019-0788

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| seen| https://t.me/nuancesprognews/560 2026-08-23 00:00:13+00:00| seen| https://t.me/nuancesprognews/560...

CVE-2019-0787

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| seen| https://t.me/nuancesprognews/560 2026-08-23 00:00:13+00:00| seen| https://t.me/nuancesprognews/560...

CVE-2026-16911

creationtimestamp| type| source ---|---|--- 2026-08-22 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtp3a3eoau2v...

Directory Traversal

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Directory Traversal via multiple corpus readers crubadan.py, lin.py, xmldocs.py, pl196x.py, mte.py, toolbox.py, namedentity.py, nkjp.py,...

Directory Traversal

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Directory Traversal via the gettag method in nltk/corpus/reader/ipipan.py, which is the single choke point for channels, domains, categories, a...

CVE-2026-75866

creationtimestamp| type| source ---|---|--- 2026-08-22 18:37:25+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/cgm4yobjpxdg7...

AZL-97140 CVE-2026-74694 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

CVE-2026-74694

In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length field of the in-band packet header, while the source buffer is the...

AZL-97176 CVE-2026-74673 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...

CVE-2026-74673

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...

AZL-97214 CVE-2026-74598 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

UBUNTU-CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...

CVE-2026-74673

In the Linux kernel, the following vulnerability has been resolved: Input: evdev - fix information leak in evdevpassvalues In evdevpassvalues, the inputevent structure is allocated on the kernel stack and populated field-by-field. However, it is never fully initialized. On architectures where...

CVE-2026-74598

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix Route Information option length validation rt6routercv validates the Route Information option RFC 4191 length against the prefix length, but both checks are off by one. rinfo-length is the ND option length in units of 8...