The vulnerability of the az6027_i2c_xfer() function in the driver/media/usb/dvb-usb/az6027.c file of the Linux operating system’s multimedia device USB driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the az6027i2cxfer function in the driver/media/usb/dvb-usb/az6027.c file of the Linux multimedia device driver framework is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the Secure Boot component in Linux operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Secure Boot component in Linux operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Ollama 安全漏洞

Ollama is an open-source tool developed by Ollama that can be run locally, used for managing and customizing large language models. Versions of Ollama from 0.12.10 to 0.17.5 have security vulnerabilities. These vulnerabilities stem from the lack of integrity or authenticity verification when...

The vulnerability of the icmp6_dev() function in the net/ipv6/icmp.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the icmp6dev function in the net/ipv6/icmp.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the power_supply_get_battery_info() function in the drivers/power/supply/power_supply_core.c file of the Linux kernel’s power management driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the powersupplygetbatteryinfo function in the drivers/power/supply/powersupplycore.c file of the Linux kernel’s power management driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the integrity_init_keyring() function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem allows a attacker to trigger a service failure.

The vulnerability of the integrityinitkeyring function in the security/integrity/digsig.c module of the Linux kernel’s security subsystem is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the hi3660_thermal_probe() function in the drivers/thermal/hisi_thermal.c module of the Linux kernel’s temperature control driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hi3660thermalprobe function in the drivers/thermal/hisithermal.c module of the Linux kernel’s temperature control driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the vmbus_disconnect() function in the drivers/hv/connection.c module of the Microsoft HyperV Linux kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the vmbusdisconnect function in the drivers/hv/connection.c module of the Microsoft HyperV Linux operating system kernel is related to the dereferencing of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

The vulnerability of the __acquires() function in the drivers/md/md-bitmap.c file of the multi-device driver module for Linux operating systems, which allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the acquires function in the drivers/md/md-bitmap.c file of the Linux device driver module for multiple devices such as RAID and LVM is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the tracing-subscriber library, related to the failure to take measures to neutralize special elements, allows attackers to compromise the integrity of the protected information.

The vulnerability of the tracing-subscriber library, related to the failure to take measures to neutralize special elements, allows attackers to compromise the integrity of the protected information...

The vulnerability of the cxl_parse_cfmws() function in the drivers/cxl/acpi.c module of the CXL device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cxlparsecfmws function in the drivers/cxl/acpi.c module of the CXL device driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the skb_try_coalesce() function in the net/core/skbuff.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the skbtrycoalesce function in the net/core/skbuff.c module of the Linux kernel’s networking functions relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the ext4_da_write_end() function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ext4dawriteend function in the fs/ext4/inode.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an...

CVE-2026-33467

Improper Verification of Cryptographic Signature CWE-347 in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing close...

EUVD-2026-26140

Improper Verification of Cryptographic Signature CWE-347 in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing close...

CVE-2026-33467

Elastic Package Registry is affected by CVE-2026-33467 due to improper verification of cryptographic signatures (CWE-347), enabling package integrity bypass for self-hosted deployments that sync from upstream. Affected versions: all up to and including 1.37.0. The issue can be exploited if an att...

CVE-2026-33467 Improper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity Bypass

Improper Verification of Cryptographic Signature CWE-347 in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing close...

CVE-2026-33467 Improper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity Bypass

Improper Verification of Cryptographic Signature CWE-347 in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing close...

Elastic Package Registry 1.38.0 Security Update (ESA-2026-27)

Improper Verification of Cryptographic Signature in Elastic Package Registry Leading to Package Integrity Bypass Improper Verification of Cryptographic Signature CWE-347 in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the...

CVE-2026-42428

OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives. Attackers can install malicious or tampered plugin packages without detection, compromising the local assistant environment...