15231 matches found
CVE-2026-72392 ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...
EUVD-2026-59291
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...
CVE-2026-72115 can: bcm: track a single source interface for ANYDEV timeout/throttle ops
In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for ANYDEV timeout/throttle ops An ANYDEV rx op ifindex == 0 with an active RX timeout and/or throttle timer has no defined semantics when matching frames arrive from several interfaces:...
CVE-2026-74560: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xskdropskb for AFXDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq to be published is invalid. Actually the severer thing is the whole...
CVE-2026-14484: Improper Limitation of a Pathname to a Restricted Directory
The RapiSafe – Secure Multi File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the handleAjaxRemoveUpload function in all versions up to, and including, 1.0.4. This makes it possible for unauthenticated attacker...
PT-2026-73011
In the Linux kernel, the following vulnerability has been resolved: xsk: drain continuation descs after overflow in xsk build skb Fix generic xmit path multi-buffer logic when packets are either too big count of descriptors exceed MAX SKB FRAGS or an invalid descriptor is included in fragmented...
PT-2026-73012
In the Linux kernel, the following vulnerability has been resolved: xsk: fix buffer leak in xsk drop skb for AF XDP multi-buffer Tx This patch is inspired by the check1 from sashiko. It says when overflow happens, the address of cq to be published is invalid. Actually the severer thing is the who...
CVE-2026-72392: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6: fix NULL deref in fib6walkcontinue on multi-batch dump inet6dumpfib saves its progress in cb-args1 as a positional index within the current hash chain. Between batches, a concurrent fib6newtable can insert a new table...
CVE-2026-74241
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol LDAP authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling...
UBUNTU-CVE-2026-74248
OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an authenticated user may prevent deletion of that policy. All Octavia deployments are affected...
CVE-2026-19870
The CVE-2026-19870 entry concerns Roskus Prospero Flow CRM (vendor Roskus) prior to version 5.15.10. It is an IDOR in the payroll module where authenticated users with read payroll permission can view salary and banking details of employees from other companies, and users with create payroll perm...
EUVD-2026-58621
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
CVE-2026-19870 IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation
Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any other company in the instance, and users holding the create...
GO-2026-5676 vulnerabilities
Vulnerabilities for packages: kubo-fips, kubo, kyverno-policy-reporter, traefik-fips, prometheus-blackbox-exporter-fips, coredns, syncthing-fips, eks-distro, opentelemetry-operator-fips, jitsucom-bulker, mediamtx-fips, teleport, kyverno-policy-reporter-plugins-trivy, mediamtx,...
GO-2024-2978 vulnerabilities
Vulnerabilities for packages: minio, certificate-transparency, opentelemetry-collector-contrib-fips, spire-server-fips, grafana-mimir, zot, terraform-docs, conftest-fips, cloudnative-pg-fips, aws-ebs-csi-driver, sigstore-scaffolding, rqlite, smarter-device-manager-fips,...
GO-2026-4865 vulnerabilities
Vulnerabilities for packages: wave, crossplane-provider-aws-ssm-fips, seaweedfs-operator-fips, zot, cloudflared-fips, google-guest-agent, bank-vaults-fips, virt-controller-fips, boring-registry, coredns, opa-envoy, kubernetes-csi-node-driver-registrar-fips,...
GO-2026-4550 vulnerabilities
Vulnerabilities for packages: packer, crossplane-provider-azure-storage, docker-fips, actions-runner-controller, grype-db, zot, rclone, gitness, gitlab-runner, boring-registry, reports-server, skaffold, kyverno-fips, hydra-fips, crossplane-provider-aws-kinesis-fips, src-fingerprint, argo-cd-fips,...
GO-2026-5763 vulnerabilities
Vulnerabilities for packages: kyverno-policy-reporter-plugins-kyverno-fips, sigstore-scaffolding-fips, spire-server-fips, zot, tekton-chains-fips, cloudbeat-fips, cosign, crossplane, neuvector-sigstore-interface, ratify-fips, docker, skaffold, tkn-fips, policy-controller, kyverno-fips, ko-fips,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: minio, wave, maru, kubo, amass, helm-operator-fips, wavefront-collector-for-kubernetes, reports-server, boring-registry, yace, rabbitmq-messaging-topology-operator-fips, whereabouts-fips, kyverno-policy-reporter-fips, dkron, terraform, terraform-provider-sendgrid-fip...
