70049 matches found
HPESBHF05116 rev.2 - HPE ProLiant DL/ML/XD, Alletra, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01439, Intel Xeon processor with Alias Checking Trusted Module Advisory, Local Escalation of Privilege
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...
PT-2026-80180
GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth...
PT-2026-70166
n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions before 1.123.67, 2.31.5, and 2.32.1, a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting...
PT-2026-70155
An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition = order receive permission to read arbitrary database contents via the orderby request parameter in acqui/parcels.pl. The parameter is passed to...
CVE-2026-20898: Improper Access Control
Improper access control in the firmware for some in Alias Checking Trusted Module for some IntelR XeonR processors may allow an escalation of privilege. Startup code and SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may...
Intel® Xeon® processor with Alias Checking Trusted Module Advisory
Summary: A potential security vulnerability in the Alias Checking Trusted Module for some Intel® Xeon® processor may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20898 Description: Improper acce...
PT-2026-70300
Uncaught exception for some IntelR TDX modules within Ring 0: Trust Domain may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requiremen...
CVE-2026-62693: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-72764: Exposure of Resource to Wrong Sphere
n8n's JavaScript task runner shared a single module cache across all users' Code-node executions. In affected versions before 1.123.67, 2.31.5, and 2.32.1, a user able to run a Code node could poison a cached module and thereby alter other users' Code-node executions on the same runner, affecting...
Linux Distros Unpatched Vulnerability : CVE-2026-68178
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open miscopen installs a misc driver's file...
Langflow Remote Code Execution
Langflow versions prior to 1.9.0 are susceptible to unauthenticated remote code execution through the /api/v1/buildpublictmp/flowid/flow endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code. frozenstringliteral: true This module requires...
CVE-2026-20885: Improper Authentication
Improper authentication in the IntelR TDX module for some IntelR platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This...
NGINX: Buffer Over-read
NGINX Open Source and NGINX Plus have a vulnerability in the ngx http mp4 module, which might allow an attacker to over-read NGINX worker memory resulting in its termination, using a specially crafted mp4 file. The issue only affects NGINX if it is built with the ngx http mp4 module and the mp4...
CVE-2026-68083
A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. An authenticated client could exploit a path resolution error, specifically in the ksmbdvfskernpathcreate function. This vulnerability allows a client to use ".." components in a path to escape the intended...
[SECURITY] [DSA 6428-1] libyaml-syck-perl security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6428-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 10, 2026 https://www.debian.org/security/faq -...
SUSE-SU-2026:3558-1 Security update for perl
This update for perl fixes the following issues: - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds bsc1266304. - CVE-2026-12087: Socket's packipmreqsource can copy adjacent heap memory into the returned packed structure...
CVE-2026-72738 Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the search parameter through normalizeS3Path and interpolates it into an rclone lsjson command executed by childprocess.exec,...
CVE-2026-72738
Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the backup.listBackupFiles tRPC endpoint in apps/dokploy/server/api/routers/backup.ts passes the search parameter through normalizeS3Path and interpolates it into an rclone lsjson command executed by childprocess.exec,...
SUSE CVE-2026-67214
nanoid Nano ID before 3.3.16 and 5.1.16 contains an infinite loop in the customAlphabet and nanoid functions of its non-secure module nanoid/non-secure. When these functions are given a negative size, the loop counter is decremented from a negative value and never reaches its termination conditio...
