38683 matches found
CVE-2026-68127
In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskbmaypull in checksum adjust ilacsumadjusttransport caches ip6h = ipv6hdrskb before calling pskbmaypull. On a non-linear skb whose transport header sits in a page fragment, pskbmaypull can call...
EUVD-2026-55565
In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIMEWAIT socket reference leak on PSP policy failure Release the TIMEWAIT socket reference and jump to discardit upon PSP policy failure in both IPv4 and IPv6 receive paths. This prevents a memory leak of tcptwbucket...
CVE-2026-68379
The CVE-2026-68379 item covers a Linux kernel TCP TIME_WAIT reference leak when PSP policy fails, in both IPv4 and IPv6 receive paths. This can cause memory leakage of tcp_tw_bucket structures and potential DoS via resource exhaustion. The documented fix releases the TIME_WAIT socket reference an...
CVE-2026-68336 bonding: fix devconf_all NULL dereference when IPv6 is disabled
In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconfall NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the devconfall is never initialized because inet6init exits before addrconfinit is called which initializes it...
kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...
Security Bulletin:Vulnerability in BIND 9 affects IBM Netezza Appliance
Summary The BIND 9 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-5946 Vulnerability Details CVEID:CVE-2026-5946 DESCRIPTION: Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet...
EulerOS 2.0 SP11 : ruby (EulerOS-SA-2026-3101)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ERB is a templating system for Ruby. Ruby 2.7.0 before ERB 2.2.0 was published on rubygems.org introduced an @init instance variable guard in...
Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DNS [CVE-2026-3039, CVE-2026-3592, CVE-2026-5946]
Summary BIND Domain Name System for IBM i is vulnerable to exessive memory consumption when receiving specially constructed packets CVE-2026-3039, amplified resource consumption when querying a specially crafted zone CVE-2026-3592, and flaws in handling of DNS messages whose CLASS is not Internet...
GHSA-JFM3-95JQ-Q3RF
creationtimestamp| type| source ---|---|--- 2026-08-07 14:32:36+00:00| seen| https://gist.github.com/alon710/083e0c15dfeb9a6ae7deb8244b73b528...
CVE-2026-54213
Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...
EUVD-2026-54444
Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...
CVE-2026-54213
Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...
CVE-2026-54213 TeamDavid: Denial of Service via endpoint 'internalRestart'
Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows the server to be shut down when a specific endpoint /internalRestart is accessed. This endpoint is accessible to unauthenticated users over the public Internet. Instead of “restarting”, the server shuts...
CVE-2026-54213
CVE-2026-54213 affects Tobit Laboratories AG TeamDavid’s Webbox. A public, unauthenticated request to the /internalRestart endpoint causes the server to shut down instead of restarting, enabling a remote attacker to trigger a persistent denial-of-service by taking the web server offline. Recovery...
sctp: don't free the ASCONF's own transport in DEL-IP processing
...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Forescout found 22 internet-facing Rockwell Automation programmable logic controllers PLCs in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan counted 4,407 exposed Rockwell controllers worldwide, including 2,844 in the Unit...
EUVD-2025-210631
The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery CSRF attacks. Specifically, it utilizes the HTTP GET method for these operations, and while the SameSite=Lax cookie attribute is employed for mitigation, this mechani...
EulerOS 2.0 SP15 : bind (EulerOS-SA-2026-2916)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...
EulerOS 2.0 SP13 : bind (EulerOS-SA-2026-3007)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...