1833 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net/sched: schfq: Fix for integer overflow of “credit”. If schfq is configured with “initial quantum” values greater than INTMAX, the first assignment of “credit” will cause signed integer overflow, resulting in a very negative...
Astra Linux – Vulnerability in Heimdal
Before version 7.7.1, Heimdal allowed attackers to cause a NULL pointer dereference in an SPNEGO acceptor, by using a preferredmechtype of GSSCNOOID and a non-zero initialresponse value for sendaccept...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: requires CAPNETADMIN to attach NGSM0710 ldisc. Any unprivileged user can attach to NGSM0710 ldisc, but it still requires CAPNETADMIN to create a GSM network. Additionally, it requires the initial namespace setting of...
openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server
A flaw was found in OpenSSL. A remote attacker could exploit this by sending a large number of QUIC Initial packets to an OpenSSL QUIC server. This can cause the server to allocate and queue new incoming channels without limit, leading to unbounded memory growth. The excessive memory consumption...
openssl: QUIC server may trigger double free when processing INITIAL packet
A flaw was found in OpenSSL. A malformed INITIAL packet with an invalid DCID destination connection ID can cause the QUIC server to double free the QRX object. This issue leads to memory corruption, causing the termination of the QUIC server process and resulting in a denial of service...
CVE-2026-81648
creationtimestamp| type| source ---|---|--- 2026-09-13 21:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvgih3sbms2b 2026-09-13 22:07:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvgm6wkgm52n 2026-09-14 05:03:31+00:00| seen|...
CVE-2026-77091
creationtimestamp| type| source ---|---|--- 2026-09-13 00:07:10+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvecglaq2z2v...
CVE-2026-79298
creationtimestamp| type| source ---|---|--- 2026-09-11 16:00:05+00:00| seen| https://t.me/GithubRedTeam/102023 2026-09-12 00:00:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102023 2026-09-14 03:00:15+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-...
CVE-2026-88044
creationtimestamp| type| source ---|---|--- 2026-09-10 17:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6luoo7m722 2026-09-10 18:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6mzj75ih2s 2026-09-10 18:09:31+00:00| seen|...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection handshake. An attacker can obtain administrative credentials by capturing network traffic during the handshake. Remediation Upgrade...
Missing Authentication for Critical Function
Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection handshake. An attacker can obtain administrative credentials by...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the initial cluster connection handshake. An attacker can obtain administrative credentials by capturing network traffic during the handshake. Remediation Upgrade...
CVE-2026-79941
creationtimestamp| type| source ---|---|--- 2026-09-10 03:20:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv53suqsbe2y...
CVE-2026-87628
creationtimestamp| type| source ---|---|--- 2026-09-09 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/117238492477381898 2026-09-09 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mv2f7xtw662q 2026-09-10 05:16:02+00:00| seen|...
CVE-2026-15140: Incorrect Privilege Assignment
A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift OCP. Only under specific conditions during the initial provisioning of a Portworx storage cluster, a user holding only limited, namespace-scoped permissions could cause the operator to grant broader access th...
CVE-2026-58599
creationtimestamp| type| source ---|---|--- 2026-09-08 17:46:40+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117236668823806281 2026-09-08 22:01:09+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:01:03+00:00| seen|...
CVE-2026-78134
creationtimestamp| type| source ---|---|--- 2026-09-08 13:35:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz5arz6362i 2026-09-11 12:45:21+00:00| seen| https://www.acn.gov.it/portale/w/sanate-vulnerabilita-in-strongswan 2026-09-16 08:02:12+00:00| seen|...
CVE-2026-75021
creationtimestamp| type| source ---|---|--- 2026-09-08 12:53:11+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3muz2vr5bhk2d 2026-09-08 13:59:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muz6n67cso22 2026-09-08 14:10:44+00:00| seen|...
EUVD-2026-72540
Improper Authentication vulnerability in ash-project ashauthenticationoauth2server allows an unauthenticated attacker to register OAuth clients even when Dynamic Client Registration is gated by an initial access token. resolvesecret/3 in AshAuthentication.Oauth2Server reached through resolvesecre...