CVE-2024-6541

The CVE-2024-6541 issue involves the Class Mediator in multiple WSO2 products failing to properly validate or sanitize messageContext properties when used to populate dynamic values. This vulnerability can allow authenticated users to access or modify data across different invocations that should...

CVE-2026-64993

Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-64993

Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could potentially exploit this vulnerability leading to loss of confidentiality and integrity...

CVE-2026-64993

Dell RVTools before 4.8.1 contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could exploit this to impact confidentiality and integrity. Impact is described as high for confidentiality and integrity; attack vector is network with no user ...

SUSE-SU-2026:23168-1 Security update for libssh

This update for libssh fixes the following issues - CVE-2026-59843: denial of service via zero advertised channel packet size bsc1272164. - CVE-2026-59844: denial of service via oversized SFTP read length bsc1272165. - CVE-2026-59845: denial of service via unchecked ProxyCommand fork failure...

CVE-2025-12627

The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated sessions. This allows an attacker who has obtained an access token for an impersonated user to leverage the refresh token grant to obtain new access tokens, extending their...

EUVD-2025-210629

The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated sessions. This allows an attacker who has obtained an access token for an impersonated user to leverage the refresh token grant to obtain new access tokens, extending their...

The vulnerability of the damon_sysfs_scheme_add_dirs() function in the mm/damon/sysfs-schemes.c module, a memory-management subsystem of the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damonsysfsschemeadddirs function in the mm/damon/sysfs-schemes.c module, a memory management subsystem of the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the pci_slot_trylock() function in the drivers/pci/pci.c file of the Linux operating system’s PCI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcislottrylock function in the drivers/pci/pci.c file of the Linux operating system’s PCI device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrit...

The vulnerability of the sprd_adi_probe() function in the drivers/spi/spi-sprd-adi.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sprdadiprobe function in the drivers/spi/spi-sprd-adi.c file of the Linux operating system’s SPI device driver relates to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tegra_qspi_combined_seq_xfer() function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tegraqspicombinedseqxfer function in the drivers/spi/spi-tegra210-quad.c file of the Linux operating system’s SPI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the __get_sregs2() function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the getsregs2 function in the arch/x86/kvm/x86.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the...

The vulnerabilities in the functions ac97_adapter_release(), ac97_add_adapter(), and snd_ac97_controller_register() of the sound/ac97/bus.c module of the Linux kernel sound subsystem allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the functions ac97adapterrelease, ac97addadapter, and sndac97controllerregister in the sound/ac97/bus.c module of the Linux kernel audio subsystem is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the nfc_unregister_device() function in the net/nfc/core.c module of the NFC subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfcunregisterdevice function in the net/nfc/core.c module of the Linux NFC subsystem is related to the mutual locking of execution threads. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to compromise data integrity.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created print file...

The vulnerability of the jfs_iget() function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

The vulnerability of the nr_route_frame() function in the net/netrom/nr_route.c module, which is part of the networking functions in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nrrouteframe function in the net/netrom/nrroute.c module, which is part of the networking functions in the Linux kernel, relates to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the xfrm6_get_saddr() function in the net/ipv6/xfrm6_policy.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrm6getsaddr function in the net/ipv6/xfrm6policy.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of uninitialized variables. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

The vulnerabilities of the functions uacce_put_queue() and uacce_fops_unl_ioctl() in the drivers/misc/uacce/uacce.c module of the Linux kernel allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions uacceputqueue and uaccefopsunlioctl in the drivers/misc/uacce/uacce.c module of the Linux kernel are related to state management errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the damon_sysfs_context_add_dirs() function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the damonsysfscontextadddirs function in the mm/damon/sysfs.c module, a memory management subsystem of the Linux operating system, is related to improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...