Shinrays Games Goods Triple App 安全漏洞

Shinrays Games Goods Triple App is an application for trading virtual game goods by Shinrays Games. Versions of Shinrays Games Goods Triple App 1.200 and earlier contained a security vulnerability. This vulnerability stemmed from incorrect handling of parameters AESIV/AESPASSWORD in the jRwTX.jav...

CVE-2026-23413: Use After Free

In the Linux kernel, the following vulnerability has been resolved: clsact: Fix use-after-free in init/destroy rollback asymmetry Fix a use-after-free in the clsact qdisc upon init/destroy rollback asymmetry. The latter is achieved by first fully initializing a clsact instance, and then in a seco...

Vulnerability of the functions blk_iocost_init() (block/blk-iocost.c) and wbt_init() (block/blk-wbt.c) in the Linux operating system’s kernel, allowing a hacker to trigger a service failure

The vulnerability of the functions blkiocostinit block/blk-iocost.c and wbtinit block/blk-wbt.c in the Linux kernel is related to improper code validation for return operations. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-5314

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2026-5314 Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal out-of-bounds

A vulnerability was found in Nothings stb up to 1.26. Impacted is the function stbttInitFontinternal in the library stbtruetype.h of the component TTF File Handler. Performing a manipulation results in out-of-bounds read. Remote exploitation of the attack is possible. The exploit has been made...

PT-2026-36389

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A state inconsistency occurs in the cdns3 USB driver when cdns3 gadget start fails. In this scenario, the Dual-Role Device DRD hardware remains in gadget mode while the software state is...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50171)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-50171 advisory. - macvlan: fix error recovery in macvlancommonnewlink Eric Dumazet Orabug: 39057366 CVE-2026-23209 - netfilter: nftables: fix inverted genmask check in...

The vulnerability of the zynqmp_audio_init() function in the drivers/gpu/drm/xlnx/zynqmp_dp_audio.c driver module allows a hacker to cause a service failure in the Linux operating system’s Direct Rendering Infrastructure (DRI).

The vulnerability of the zynqmpaudioinit function in the drivers/gpu/drm/xlnx/zynqmpdpaudio.c driver lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2026-17510

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

CVE-2026-24148

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the initialization of a resource with an insecure default. A successful exploit of this vulnerability might lead to information disclosure of encrypted data, data...

SUSE-SU-2026:20984-1 Security update for gnutls

This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. bsc1257960 - CVE-2025-9820: Fixed a buffer overflow in gnutlspkcs11tokeninit. bsc1254132 - Add the functionality to allow to specify the hash algorith...

MiracleLinux 8 : gnutls-3.6.16-8.el8_10.5.ML.1 (AXSA:2026-360:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-360:02 advisory. gnutls: Stack-based Buffer Overflow in gnutlspkcs11tokeninit Function CVE-2025-9820 gnutls: GnuTLS: Denial of Service via excessive resource...

The vulnerability of the `ibmebus_bus_init()` function in the `arch/powerpc/platforms/pseries/ibmebus.c` module, which is part of the PowerPC platform support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the ibmebusbusinit function in the arch/powerpc/platforms/pseries/ibmebus.c file, which is part of the Linux operating system’s PowerPC platform support module, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an...

The vulnerability of the msm_hdmi_init() function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver of the Direct Rendering Infrastructure (DRI) kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the msmhdmiinit function in the drivers/gpu/drm/msm/hdmi/hdmi.c driver for the Direct Rendering Infrastructure DRI component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failur...

The vulnerability of the dvb_ringbuffer_init() function in the drivers/media/dvb-core/dmxdev.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the dvbringbufferinit function in the drivers/media/dvb-core/dmxdev.c module of the Linux kernel is related to improper resource management throughout its lifecycle. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-23344

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Fix use-after-free on error path In the error path of sevtsminitlocked, the code dereferences 't' after it has been freed with kfree. The prerr...

CVE-2026-33725

Metabase Enterprise (all versions dating back to at least 1.47) prior to 1.59.4 include a vulnerability where authenticated admins can trigger Remote Code Execution (RCE) and Arbitrary File Read via POST /api/ee/serialization/import. A crafted serialization archive injects an INIT property into t...

The vulnerability of the smc_init() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcinit function in the net/smc/afsmc.c module of the Linux kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the qla2x00_probe_one() function in the drivers/scsi/qla2xxx/qla_os.c driver module of the Linux operating system’s SCSI device kernel allows a hacker to cause a service failure.

The vulnerability of the qla2x00probeone function in the drivers/scsi/qla2xxx/qlaos.c driver for Linux SCSI devices is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...