2267 matches found
EUVD-2026-39474
Keycloak: Attacker can re-enable and take over disabled clients via registration access token...
Astra Linux – vulnerability in edk2
EDK2 contains a vulnerability in HashPeImageByType. A user can cause a read out of bounds condition when a corrupted data pointer and length are transmitted over a network. Successful exploitation of this vulnerability may result in a loss of Integrity and/or Availability...
Astra Linux – vulnerability in openjdk-11
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: Hotspot. Affected versions include Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise...
Astra Linux – Vulnerability in grub2
A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory use-after-free issue, occurs because the normalexit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after...
Astra Linux – Vulnerability in grub2
A flaw was discovered in grub2 in versions prior to 2.06. The option parser allows an attacker to overwrite a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The greatest threat from this vulnerability is to data confidentiality and...
Astra Linux – Vulnerability in grub2
A flaw was discovered in the HFS filesystem. When reading the name of an HFS volume during the grubfsmount function, the HFS filesystem driver uses the user-provided volume name as input without properly verifying the length of that name. This issue may lead to a heap-based out-of-bounds write...
Astra Linux – Vulnerability in linux-astra-modules-5.10, linux-astra-modules-5.15, linux-astra-modules-6.1
The vulnerability of Linux Astra Modules relates to errors during thread blocking. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the use of a specially created file system...
Astra Linux – Vulnerability in dpdk
NVIDIA’s distribution of the Data Plane Development Kit MLNXDPDK contains a vulnerability in the network stack, where error recovery is not handled properly. This vulnerability can allow a remote attacker to cause denial of service, as well as affect data integrity and confidentiality...
Astra Linux – Vulnerability in cups
The vulnerability of the copystack function in the CUPS printing server relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...
CVE-2026-16552
REJECTED A flaw was found in systemd-tmpfiles. When processing a tmpfiles.d configuration entry that writes to a file, systemd-tmpfiles can follow a symbolic link placed by an unprivileged local user, and an existing safety check does not detect this specific case because it always treats...
CVE-2026-64993
Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...
Linux kernel Memory Management Buffer Overflow DoS
The vulnerability in the damonsysfsschemeadddirs function within the mm/damon/sysfs-schemes.c file of the Linux kernel memory management subsystem is related to improper deallocation or release of resources. Exploitation of this vulnerability may allow an attacker to compromise the confidentialit...
Linux NFC Uncompromise
The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...
Linux Kernel arch/x86/kvm/x86.c Heap Buffer Overflow DoS
The vulnerability of the getsregs2 function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...
Linux Distros Unpatched Vulnerability : CVE-2026-71225
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher...
Important: java-25-amazon-corretto
Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11...
ROS-20260804-73-0027
The vulnerability of the rcunocbrdpoffload function in the kernel/rcu/treenocb.h file of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-47746 Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks
Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation and the compaction process. Because the JSON-LD parsing context is not shared between signature verification and...
CVE-2026-47746
Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation and the compaction process. Because the JSON-LD parsing context is not shared between signature verification and...
