13635 matches found
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12;...
FreeRDP: FreeRDP: HTTP Proxy Request Injection via Redirection
A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can exploit this vulnerability to inject arbitrary headers or requests into an HTTP proxy CONNECT request. This occurs because FreeRDP does not properly validate control characters in the server-controlled...
CVE-2026-68302
In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...
CVE-2026-68179 misc: nsm: only unlock nsm_dev on post-lock error paths
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...
EUVD-2026-55280
In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsmdev on post-lock error paths nsmdevioctl jumps to the common out label even when the initial copyfromuser fails before nsm-lock has been taken. The error path then blindly unlocks a mutex that was never...
net: openvswitch: reject oversized nested action attrs
...
MGASA-2026-0325 Updated rootcerts, nss & firefox packages fix security vulnerabilities
Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...
Updated rootcerts, nss & firefox packages fix security vulnerabilities
Updated rootcerts, nss & firefox packages fixes various vulnerabilities. Please see the links for detailed information of each one...
Azure SQL Database Elevation of Privilege Vulnerability
Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network...
thunderbird security update
140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...
thunderbird security update
140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...
CVE-2026-68742
A flaw was found in SSSD. The sssnssprotocolparseaddr function in the NSS responder does not validate the addrlen field against the remaining packet body size. A local attacker can exploit this via a crafted GETHOSTBYADDR request to the NSS responder socket, causing an out-of-bounds read and...
The Network Has Become the Control Plane for AI Security
Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model: users connect to applications,...
Mitsubishi Electric CC-Link IE TSN Communication Protocol
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker with access to the same network segment to tamper with communication data in the affected product by sending specially crafted packets under specific timing conditions. This could allow the attacker to cause a...
Debian dsa-6403 : libnss3 - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6403 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6403-1 [email protected] https://www.debian.org/security/...
The CTDB protocol has bounds checking issues
== Summary: CTDB fails to do integrity checking of received packets. This includes failure to check field lengths against packet lengths when unmarshalling packets. Description CTDB fails to do a number of integrity checks on received packets. This includes: checking of field lengths against pack...
BIT-DOTNET-2026-50528 .NET Security Feature Bypass Vulnerability
Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-65274
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An app may be able to access sensitive user data because information is sent over t...
CISCO-SA-20180409-SMI
creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:51+00:00| seen| https://t.me/KaitNews/7703 2026-07-27 00:01:35+00:00| seen| https://t.me/KaitNews/7703 2026-07-29 03:00:03+00:00| seen| https://t.me/KaitNews/7703 2026-07-30 00:03:17+00:00| seen| https://t.me/KaitNews/7703...