66155 matches found
CVE-2026-43243
CVE-2026-43243 affects the Linux kernel drm/amd/display subsystem, specifically the dcn401 get_phyd32clk_src path, where missing signal type checks can cause a crash when accessing a DP link on DPIA. Connected OSV entries show Root and Debian/Ubuntu patches applied to rootio-linux (Ubuntu 22.04/2...
CVE-2026-43243
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add signal type check for dcn401 getphyd32clksrc Trying to access link enc on a dpia link will cause a crash otherwise...
CVE-2026-43243 drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add signal type check for dcn401 getphyd32clksrc Trying to access link enc on a dpia link will cause a crash otherwise...
CVE-2026-43161 iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode PCIe endpoints with ATS enabled and passed through to userspace e.g., QEMU, DPDK can hard-lock the host when their link drops, either by surprise...
CVE-2026-43134 Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAPLECONNREQ This adds a check for encryption key size upon receiving L2CAPLECONNREQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAPCRLEBADKEYSIZE...
CVE-2026-43134
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for L2CAPLECONNREQ This adds a check for encryption key size upon receiving L2CAPLECONNREQ which is required by L2CAP/LE/CFC/BV-15-C which expects L2CAPCRLEBADKEYSIZE...
Cross-site Scripting (XSS)
Overview org.apache.wicket:wicket-extensions is a rich component library for the Wicket framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper neutralization of JavaScript in PopupSettings.java, Link.java, and ExternalLink.java markup. An attacker ca...
Cross-site Scripting (XSS)
Overview org.apache.wicket:wicket-core is a Java web application framework that takes simplicity, separation of concerns and ease of development to a whole new level. Wicket pages can be mocked up, previewed and later revised using standard WYSIWYG HTML design tools. Dynamic content processing an...
CVE-2026-7332
creationtimestamp| type| source ---|---|--- 2026-05-06 10:26:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ih6wfse2i 2026-05-08 21:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mleombezzn2h...
CVE-2026-41288
creationtimestamp| type| source ---|---|--- 2026-05-06 10:24:20+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/watchguard-security-advisory-av26-428 2026-05-06 17:38:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml7ak7bskn2c 2026-05-07 02:36:02+00:00| seen|...
CVE-2026-6672
creationtimestamp| type| source ---|---|--- 2026-05-06 10:21:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6i676cax2p 2026-05-09 02:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlf7epospu2h...
CVE-2026-7841
creationtimestamp| type| source ---|---|--- 2026-05-06 09:57:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6gseenn52p 2026-05-06 10:07:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6hel52bm2k 2026-05-06 18:59:50+00:00| seen|...
CVE-2026-2306
creationtimestamp| type| source ---|---|--- 2026-05-06 09:52:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6giu44bd2h 2026-05-08 20:33:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlelayhfyr2u...
Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool RAT and a previous undocumented plugin dubbed Pheno with the aim of facilitating credential theft. "According to the functionalities of the CloudZ RAT and Pheno plugin, this was...
CVE-2026-7573
creationtimestamp| type| source ---|---|--- 2026-05-06 05:23:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5xioq7lt2n...
CVE-2026-41429
creationtimestamp| type| source ---|---|--- 2026-05-06 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3ml5ta25iz32p 2026-05-08 11:02:15+00:00| seen| https://bsky.app/profile/keiwork35.bsky.social/post/3mldle5h5if2b...
GHSA-7WW3-XVF5-CXWM
creationtimestamp| type| source ---|---|--- 2026-05-06 03:10:29+00:00| seen| https://gist.github.com/alon710/1d05503905d86d5b6619223d3f318c59...
CVE-2025-71252
creationtimestamp| type| source ---|---|--- 2026-05-06 02:54:15+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml5p5pkzx226 2026-05-06 05:28:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml5xronng72o 2026-06-01 18:00:00+00:00| seen|...