76081 matches found
CVE-2026-68446
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...
CVE-2026-68446 drm/vmwgfx: Validate vmw_surface_metadata::array_size
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Model SM is available...
PT-2026-71299
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3 Description Improper validation of user supplied input may allo...
PT-2026-71166
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Insufficient input validation allows a remote authenticated attacker to execute arbitrary Control Language commands. Recommendations At the moment, there is no information about a newer version that...
PT-2026-71191
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper validation of input size may allow a remote attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
Linux Distros Unpatched Vulnerability : CVE-2026-68446
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and should be validated against specific limits depending on which Shader Mod...
ROS-20260812-73-0029
The vulnerability in Wireshark is related to the lack of checks on input data for cyclic operations. Exploiting this vulnerability can allow a hacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-20901
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation for some IntelR XeonR processors within firmware may allow an escalation of privilege. Startup code and smm adversary with a privilege...
The vulnerability of the bpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the bpf component in the Linux operating system’s kernel is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-71178
Name of the Vulnerable Software and Affected Versions Apache Allura versions prior to 1.19.1 Description Specifically crafted inputs may lead to git argument injection, a flaw where an attacker can insert unauthorized arguments into a git command executed by the application. Recommendations Upgra...
PT-2026-71303
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data...
PT-2026-71297
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 IBM Verify Identity Access Container versions 11.0 through 11.0.3 Description An input validation issue exists in the management...
The vulnerability of the fs/ntfs3 component in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-71268
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote authenticated attackers can gain elevated privileges due to improper validation of a client-supplied profile name. Recommendations At the moment, there is no information about a newer version...
PT-2026-71252
A flaw was found in the cluster-curator-controller component of multicluster engine MCE. A tenant with create or update permissions on ClusterCurator resources can inject an arbitrary Job specification. This is possible because the CreateJob function does not validate user-controlled input when...
PT-2026-71097
A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation. A malicious actor may leverage this vulnerability to cause the NT AUTHORITYSYSTEM...
Linux Distros Unpatched Vulnerability : CVE-2026-4757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation. This flaw can only be...
Cisco IOS XE Software Security Hardening Release: August 2026 (cisco-sa-hardening-iosxe-V8NMuMZJ)
According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review...
CVE-2026-5304
A flaw was found in Axis devices. An attacker could exploit a lack of input validation in an ACAP AXIS Camera Application Platform configuration file to achieve privilege escalation. This vulnerability requires the Axis device to be configured to allow unsigned ACAP applications, and an attacker...
