70 matches found
CVE-2026-67864
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component...
CVE-2026-67864
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component...
CVE-2026-67864
A vulnerability in the open62541 C-based library (v.1.5.5 and before) allows a remote attacker to cause a denial of service (DoS) . The flaw exists in the NodeManagement type-instantiation logic component , which can make the affected system unavailable to legitimate users. While specific exploit...
CVE-2026-67864
An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component...
EUVD-2026-35153
In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in ofunittestchangeset The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct devicenode. The call to ofnodeputnchangeset can...
WireGuard Portal Privilege Escalation
The vulnerability in the WireGuard Porta node management and interface interfaces is related to authentication errors. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the level of an administrator by sending a PUT request...
EUVD-2023-60411
In the Linux kernel, the following vulnerability has been resolved: amba: bus: fix refcount leak commit 5de1540b7bc4 "drivers/amba: create devices from device tree" increases the refcount of ofnode, but not releases it in ambadevicerelease, so there is refcount leak. By using ofnodeput to avoid...
EUVD-2021-15337
Malware in sbrugna...
EUVD-2022-54516
Malicious code in bioql PyPI...
EUVD-2022-39623
Malicious code in bioql PyPI...
EUVD-2025-13175
Malicious code in bioql PyPI...
EUVD-2025-30844
Malicious code in bioql PyPI...
GHSA-8J63-96WH-WH3J 1Panel agent certificate verification bypass leading to arbitrary command execution
Project Address: Project Address 1Panel Official website: https://www.1panel.cn/ Time: 2025 07 26 Version: 1panel V2.0.5 Vulnerability Summary - First, we introduce the concepts of 1panel v2 Core and Agent. After the new version is released, 1panel adds the node management function, which allows...
CVE-2021-28674
The node management page in SolarWinds Orion Platform before 2020.2.5 HF1 allows an attacker to create or delete a node outside of the attacker's perimeter via an account with write permissions. This occurs because node IDs are predictable with incrementing numbers and the access control on...
CVE-2024-10306
A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as "Require ip IPADDRESS" would suggest. This means that anyone with access to the host might send MCMP requests that may result in...
CVE-2024-10306
A vulnerability was found in modproxycluster. The issue is that the directive should be replaced by the directive as the former does not restrict IP/host access as Require ip IPADDRESS would suggest. This means that anyone with access to the host might send MCMP requests that may result in...
mod_cluster security vulnerability
modcluster is an httpd-based load balancer for the modcluster project. A security vulnerability exists in modcluster that stems from the Directory directive not properly restricting IP or host access, which could lead to unauthorized node management operations...
CVE-2025-39930
In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...
CVE-2025-39930 ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai()
In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Don't use freedevicenode at graphutilparsedai commit 419d1918105e "ASoC: simple-card-utils: use freedevicenode for device node" uses freedevicenode for dlc-ofnode, but we need to keep it while driver is i...
Important: Red Hat Security Advisory: fence-agents security update
An update for fence-agents is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...