The vulnerability of the gpio_keys_quiesce_key() function in the drivers/input/keyboard/gpio_keys.c file of the Linux kernel’s keyboard support driver allows a hacker to induce a system halt.

The vulnerability of the gpiokeysquiescekey function in the drivers/input/keyboard/gpiokeys.c file of the Linux kernel’s keyboard support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

AIX : Multiple Vulnerabilities (IJ57128)

The version of AIX installed on the remote host is prior to APAR IJ57128. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57128 advisory. - A flaw was identified in the X.Org X server's X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap...

AIX : Multiple Vulnerabilities (IJ57162)

The version of AIX installed on the remote host is prior to APAR IJ57162. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ57162 advisory. - A flaw was identified in the X.Org X server's X Keyboard Xkb extension where improper bounds checking in the XkbSetCompatMap...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50100)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50100 advisory. - crypto: afalg - Fix incorrect boolean values in afalgctx Eric Biggers Orabug: 38879907 CVE-2025-40022 - crypto: afalg - Disallow concurrent writ...

CVE-2026-23623

Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5, a user with view-only rights and no download privileges can obtai...

Fedora 42 : xorgxrdp / xrdp (2026-b409dad73e)

The remote Fedora 42 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-b409dad73e advisory. Release notes for xrdp v0.10.5 2026/01/27 Security fixes - CVE-2025-68670: Improper bounds checking of domain string length leads to Stack-based...

Collabora Online 授权问题漏洞

Collabora Online is an application software developed by the British company Collabora. It is a powerful online office suite based on LibreOffice, supporting all major document, spreadsheet, and presentation file formats. There were authorization issues in versions of Collabora Online prior to...

CVE-2026-23623 Collabora Online vulnerable to Authorization Bypass

Collabora Online is a collaborative online office suite based on LibreOffice technology. Prior to Collabora Online Development Edition version 25.04.08.2 and prior to Collabora Online versions 23.05.20.1, 24.04.17.3, and 25.04.7.5, a user with view-only rights and no download privileges can obtai...

CVE-2026-23623

CVE-2026-23623 affects Collabora Online and Collabora Online Development Edition. A user with view-only rights and no download privileges can obtain a local copy of a shared file. The vulnerability is triggered by pressing Ctrl+Shift+S, which initiates the file download process despite missing do...

MiracleLinux 9 : firefox-102.5.0-1.el9.ML.1 (AXSA:2023-5007:06)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2023-5007:06 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004261)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004261 advisory. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if kascii is called several times in a row, aka...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004278)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004278 advisory. In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000716 advisory. drivers/hid/hid-lenovo-tpkbd.c in the Human Interface Device HID subsystem in the Linux kernel through 3.11, when CONFIGHIDLENOVOTPKBD is enabled, allows physically...

MiracleLinux 4 : openssh-5.3p1-114.AXS4 (AXSA:2016-145:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-145:01 advisory. SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004160)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004160 advisory. An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if kascii is called several times in a row, aka...

MiracleLinux 4 : libssh2-1.4.2-3.AXS4.1 (AXSA:2019-3922:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3922:01 advisory. libssh2: Integer overflow in transport read resulting in out of bounds write CVE-2019-3855 libssh2: Integer overflow in keyboard interactive handlin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004174 advisory. In kbdkeycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no addition...

SUSE CVE-2025-71073

In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbdinterrupt schedules lk-tq via schedulework, and the work handler lkkbdreinit dereferences the lkkbd structure and its serio/inputdev fields. lkkbddisconnect and error...

CVE-2022-50925

Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard events through an exposed WebSocket on port 8082. Attackers can craft malicious web pages to inject keystrokes, opening applications and typing arbitrary text by sending specif...

CVE-2022-50925

Prowise Reflect version 1.0.9 contains a remote keystroke injection vulnerability that allows attackers to send keyboard events through an exposed WebSocket on port 8082. Attackers can craft malicious web pages to inject keystrokes, opening applications and typing arbitrary text by sending specif...