69606 matches found
JSONata lookup() function Code Execution
The vulnerability of the lookup function in the childprocess module of the json-data transformation software JSONata is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux kernel xfrm_policy_fini Heap Buffer Overflow DoS
The vulnerability of the xfrmpolicyfini function in the net/xfrm/xfrmpolicy.c module, which is part of the Linux kernel’s networking functions, relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux Kernel DoS
The vulnerability in the simplifysymbols function within the kernel/module/main.c file of the Linux operating system kernel is related to improper validation of specified indices, positions, or offsets in input data. Exploitation of this vulnerability may allow an attacker to cause a denial of...
Linux RxRPC Kernel Heap Buffer Overflow DoS
The vulnerability of the rxrpcpreparsexdryfsrxgk function in the net/rxrpc/key.c module, which is part of the RxRPC session support in the Linux operating system’s kernel, involves integer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
net/rxrpc/rxgk.c Kernel Session Compromise
The vulnerability of the rxgkdoverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside of the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
Linux kernel Flow Change DoS
The vulnerability in the flowchange function within net/sched/clsflow.c of the net/sched subsystem in the Linux kernel operating system is related to dereferencing an array. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Network Functions Buffer Overflow
The vulnerability in the xfrmnatkeepalivenetinit function within the net/xfrm/xfrmnatkeepalive.c file of the Linux kernel’s network functions is related to state management errors. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
Linux kernel video buffer driver Heap Buffer Overflow DoS
The vulnerability of the driver module/video/fbdev/smscufx.c driver for kernel-based Linux device buffer devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
Linux MIPS ftrace Buffer Overflow DoS
The vulnerability of the functions ftracedynarchinitinsns and ftracemakecall in the arch/mips/kernel/ftrace.c module, which is part of the Linux operating system’s MIPS architecture support, stems from the execution of operations outside of memory buffers. Exploiting this vulnerability could allo...
net rxrpc rxgk.c Heap Buffer Overflow DoS
The vulnerability of the rxgkverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow a remote attacker to gain access to protected...
Linux kernel IPv6 DoS
The vulnerability in the ip6datagramsendctl function within net/ipv6/datagram.c of the Linux kernel’s IPv6 implementation is related to improper resource release. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux Heap Buffer Overflow DoS
The vulnerability of the sofcarddailinkscreate function in the sound/soc/intel/boards/sofsdw.c kernel module of the Linux operating system is related to a single-issue error. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel ext2_fill_super Buffer Overflow
The vulnerability of the ext2fillsuper function in the fs/ext2/super.c module of the Linux kernel file system is related to an invalid negative shift operation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Linux kernel Block Crypto Evict Key
The vulnerability of the blkcryptoevictkey function in the block/blk-crypto.c module, which is part of the Linux kernel’s block-level support, is related to an incorrect check on the returned value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...
Linux snd_pcm_attach_substream Buffer Overflow DoS
The vulnerability of the sndpcmattachsubstream function in the sound/core/pcm.c module, which is part of the Linux kernel’s audio card support mechanism, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
arch/arm64/kernel/sys_compat.c Heap Buffer Overflow DoS
The vulnerability of the compatarmsyscall function in the arch/arm64/kernel/syscompat.c module of the Linux operating system’s 64-bit ARM architecture kernel is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...
RockyLinux 9 : nginx:1.24 (RLSA-2026:59490)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59490 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of service...
ALSA-2026:59362 Important: nginx security update
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...
PT-2026-94313
Name of the Vulnerable Software and Affected Versions vm2 versions 3.11.3 through 3.11.6 Description The host tls module is exposed to NodeVM sandbox code, which allows attackers to call the setDefaultCACertificates function and replace process-wide certificate authorities. By utilizing allowed t...
CVE-2026-77129: Improper Neutralization of Special Elements Used in a Template Engine
The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...