SUSE CVE-2026-54789

modauthopenidc is an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. Prior to 2.4.19.4, an out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of...

Exploit for CVE-2026-32475

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File...

AlmaLinux 10 : nginx (ALSA-2026:59220)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59220 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...

ALSA-2026:59496 Important: nginx:1.26 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

PT-2026-81898

Name of the Vulnerable Software and Affected Versions Drupal Powerful Surveys affected versions not specified Description An issue exists in the Drupal Powerful Surveys module. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Dotnetnuke < 10.3.3 Server-Side request forgery in journal module (GHSA-hmwm-c2hx-wmxh)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - A server-side request forgery SSRF vulnerability in the Journal module could allow an authenticated user to cause the server to...

RHEL 10 : nginx (RHSA-2026:59220)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59220 advisory. nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage...

Dotnetnuke < 10.3.3 Unauthorized comments on private journal posts (GHSA-86mr-4mmw-j9g2)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.3.3. It is, therefore, affected by a vulnerability. - An authorization vulnerability in the Journal module could allow an authenticated user to add comments to private journal posts...

ROS-20260825-73-0016

The vulnerability of the nfsd4decodecompound function in the fs/nfsd/nfs4xdr.c module, which supports the NFS network file system in Linux kernels, is related to the occurrence of operations outside of the buffer memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-77139: Improper Limitation of a Pathname to a Restricted Directory

The extension fails to validate a client-supplied template element key before using it to build file paths for saving and deleting Mask template files. An authenticated backend user with access to the Mask module can supply a key containing path traversal sequences to create or delete .html files...

PT-2026-81897

Vulnerability in Drupal PanKM. This issue affects PanKM versions:...

Solarflare Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the efxmcdirxpullrsscontextconfig function in the drivers/net/ethernet/sfc/mcdiilters.c module of the Solarflare Ethernet network adapter driver for Linux kernel is related to the occurrence of mutual locking. Exploiting this vulnerability may allow an attacker to cause a...

Linux Kernel TCP BPF Buffer Overflow DoS

The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

S390 gmap_helper_zap_one_page Heap Buffer Overflow

The vulnerability of the gmaphelperzaponepage function in the arch/s390/mm/gmaphelpers.c module, which is part of the S390 platform support for Linux operating systems, stems from insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow an attacker to...

Linux kernel Network Buffer Overflow DoS

The vulnerability in the x25queuerxframe and x25clearqueues functions within the net/x25/x25in.c module of the Linux kernel’s network functions implementation involves buffer copying without checking input data size a classic buffer overflow condition. Exploitation of this vulnerability enables a...

Linux kernel ext4 sysfs buffer overflow DoS

The vulnerability in the ext4registersysfs and ext4unregistersysfs functions within the fs/ext4/sysfs.c file of the Linux kernel operating system is related to the reuse of previously freed memory. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality,...

Linux kernel IPv4 Protocol DoS

The vulnerability in the espoutputdone function within net/ipv4/esp4.c of the Linux kernel’s IPv4 implementation is related to incomplete cleanup of temporary or auxiliary resources. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel cfg80211_pmsr_wdev_down Heap Buffer Overflow DoS

The vulnerability in the cfg80211pmsrwdevdown function within the net/wireless/pmsr.c module of the Linux kernel wireless communication stack is related to race conditions when shared resources are utilized. Exploitation of this vulnerability may allow an attacker to compromise the confidentialit...

Linux Kernel LoongArch KVM Buffer Overflow DoS

The vulnerability in the kvmgetvcpubycpuid function within the arch/loongarch/kvm/vcpu.c module, which supports the LoongArch architecture in Linux kernel, is related to buffer overflow conditions. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality,...

Linux RxRPC Session Sockets DoS

The vulnerability of the rxrpcpostresponse function in the net/rxrpc/connevent.c module, which is part of the RxRPC session support in Linux kernel, is related to incorrect comparisons when using erroneous factors. Exploiting this vulnerability can allow an attacker to cause service failures...