56378 matches found
CVE-2026-16526 Pcp: pcp: privilege escalation to root via linux_sockets pmda vulnerability
A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...
EUVD-2026-50971
A flaw in the PCP linuxsockets module exposes an unsecured internal connection. An attacker with initial code execution can exploit this to escalate privileges and execute arbitrary commands as root...
CVE-2026-64453
A flaw was found in the Linux kernel's USB subsystem, specifically within the usbio module. This vulnerability, known as a use-after-free UAF, occurs when the system attempts to access memory that has already been released during the disconnection of a USB device. A local attacker or a specially...
CVE-2026-67247 A path traversal vulnerability was found in the IHM Log handling of ADM
A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...
CVE-2026-64307
A flaw was found in the Linux kernel's crypto:ccp module. A local attacker with access to a userspace process could exploit this vulnerability. If Secure Encrypted Virtualization SEV initialization fails while Kernel-based Virtual Machine KVM is running virtual machines, the attacker can trigger ...
CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM
A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...
CVE-2026-18188
A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...
CVE-2026-18187
A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory...
CVE-2026-18188 A format string vulnerability was found in the Rsync Backup on the ADM
A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory informati...
CVE-2026-18187
CVE-2026-18187 describes a format string vulnerability in the ADM internal backup CGI. The issue stems from including user-controlled task input in error responses that are processed by an unsafe format string operation. An authenticated attacker could exploit this remotely (network access) to di...
CVE-2026-18187 A format string vulnerability was found in the Internal Backup on the ADM
A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory...
[SECURITY] Fedora 43 Update: perl-HTTP-Date-6.08-1.fc43
This module provides functions that deal the date formats used by the HTTP protocol and then some more. Only the first two functions, time2str and str2time, are exported by default...
CVE-2026-17784
The CVE-2026-17784 entry concerns Google Chrome on macOS with an Audio component use-after-free in Chromium. The underlying issue is a use-after-free in Audio that, if a renderer process is compromised, could allow a sandbox escape via a crafted HTML page. Affected software is Chrome (Chromium-ba...
kernel security, bug fix, and enhancement update
6.12.0-211.40.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
CVE-2026-51290
CVE-2026-51290 entry is rejected/not used and does not represent an active vulnerability.
CVE-2026-12935
The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...
CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature
The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...
swagger-typescript-api vulnerable to code injection via unescaped enum string values
Summary swagger-typescript-api interpolates components.schemas..enumi string values into the body of generated TypeScript enum declarations without escaping. A malicious enum value can close the enclosing string literal, terminate the enum body, and inject a bare-block IIFE that executes at modul...
GHSA-HQJ5-CW9F-RX67 swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template
Summary swagger-typescript-api interpolates servers0.url directly into a TypeScript class-body field initializer of the generated fetch HttpClient templates/base/http-clients/fetch-http-client.ejs:75, without any escaping. A malicious URL containing a " closes the string literal that initializes...