233565 matches found
EUVD-2026-58370
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...
CVE-2026-19747
The CVE-2026-19747 entry identifies a vulnerability in Tenda devices (CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C, TC3T15C) affecting the ATE Module’s Kylin component, specifically the CAte::HandleCmd function. This manipulation enables remote command injection, implying a netwo...
CVE-2026-19747
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...
CVE-2026-19747 Tenda CH7 ATE Module Kylin HandleCmd command injection
A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625. This impacts the function CAte::HandleCmd of the file Kylin of the component ATE Module. This manipulation causes command injection. The attack is possible to be carri...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the --filter process. An attacker can gain unauthorized access to files by injecting malicious merge file directives that override intended module-level filter restrictions. Remediation A fix was pushed into...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in the chdir process when use chroot is disabled and the module root path or one of its components is a symlink. An attacker can gain unauthorized access to files outside the intended directory by exploiting symlink...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the --partial-dir or --backup-dir options when symlinks exist within the module file tree. An attacker can write files outside the intended directory by placing or exploiting a symlink under the module root,...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the handshake process. An attacker can exhaust all available connection slots by initiating multiple simultaneous connections and stalling the handshake, either before or afte...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the addimpliedinclude function when processing a crafted files-from entry containing both an interior and trailing backslash. An attacker can cause a write of one attacker-controlled byte past the end of a heap...
UNIX Symbolic Link (Symlink) Following
Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following via improper handling of symlinks in input configuration file processing, including --files-from, --password-file, and filter merge files. An attacker can access files outside the intended directory ...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the MSGIOTIMEOUT process. An attacker can cause resource exhaustion by injecting specially crafted MSGIOTIMEOUT messages with non-positive values, which disables connection timeouts and allows idle or...
postgresql: PostgreSQL amcheck: Privilege escalation via untrusted search path
An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...
CVE-2026-73567
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...
Security update for java-1_8_0-ibm
This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 8 Fix Pack 70 bsc1273223. CVE-2026-16243: inconsistent handling of zero length data in arraycmp of the SIMD evaluator bsc1274275. CVE-2026-16439: using -Xtrace to trace method arguments can lead to buffer...
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.572.g753fdae1b. Securitys issue fixed: CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: Fixbase: sanitize message...
CVE-2026-73567 sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...
CVE-2026-73567
Summary: The vulnerability affects the sm-crypto library (SM2/SM3/SM4) prior to version 0.5.0. The default Node.js key generation path for sm2.generateKeyPairHex() relied on a module-wide SecureRandom seeded from Math.random() and Date to an ARC4 stream because window.crypto.getRandomValues was u...
EUVD-2026-58182
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...
CVE-2026-73567 sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock
sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex path in Node.js uses the module-wide SecureRandom instance in src/sm2/utils.js, supplied by [email protected], which seeds an ARC4 strea...
CVE-2026-25589
A flaw was found in RedisBloom. An authenticated attacker with permission to execute the RESTORE command on a Redis server with the RedisBloom module loaded can supply a crafted serialized payload that causes an invalid memory access due to an improper validation of serialized values processed...