23767 matches found
CVE-2026-80962 dm-pcache: validate geometry fields from on-disk cache_info
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache device geometry, and getsegid takes each segment id from the on-media...
CVE-2026-80962
A vulnerability in the Linux kernel dm-pcache (device-mapper persistent cache) component allows a local attacker with CAP_SYS_ADMIN to trigger an out-of-bounds read and write by supplying a cache device with invalid on-disk geometry metadata. The root cause is that cache_segs_init() and get_seg_i...
CVE-2026-80962
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate geometry fields from on-disk cacheinfo cachesegsinit iterates cacheinfo-nsegs times indexing cache-segments, which is sized to the cache device geometry, and getsegid takes each segment id from the on-media...
PT-2026-96534
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate lengths in dlm mig lockres handler A node receiving a DLM MIG LOCKRES message trusts several fields of the peer-supplied dlm migratable lockres without validation. num locks and lockname len are bounded only on th...
PT-2026-90212
Name of the Vulnerable Software and Affected Versions Linux kernel version 6.12.94 Description A memory leak exists in the ocfs2 component of the Linux kernel. This issue is triggered when performing a copy file range operation within the same filesystem. The leak occurs during copy-on-write...
CVE-2026-84941: Improper Restriction of XML External Entity Reference
An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...
PT-2026-96459
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG ON in nfsd4 alloc layout stateid on racing delegation revoke nfsd4 alloc layout stateid reads fp-fi deleg file without holding fi lock when the parent stateid is a delegation. A concurrent delegation revoke via the...
CVE-2026-81016: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amdstbs2dinit discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only noticed...
PT-2026-96349
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd stb s2d init discards the return value of several S2D SMU commands. When the SMU refuses a command e.g. "SMU cmd failed. err: 0xff" the failure is only notic...
PT-2026-90208
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read issue exists in the ocfs2 module of the Linux kernel. The functions ocfs2 validate dx leaf and ocfs2 validate dx root fail to bound the ocfs2 dx entry list counts...
CVE-2026-80424 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to create arbitrary files due to path traversal during archive extraction...
CVE-2026-81210 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 concatenates three caller-supplied strings into a String.format path on the shared /ds-storage RWX PVC and returns the file with no project ACL — pure IDOR plus traversal. Read is constrained to files named job.log/error.log, but DataStage job logs...
CVE-2026-81551 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to arbitrarily write to or delete files on shared storage due to a path traversal vulnerability...
Malicious code in everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre4k (npm)
--- Credit: OpenSSF source...
Malicious code in everything-everywhere-all-at-once-2022-online-on-fullmovies-free-at-homesre (npm)
--- Credit: OpenSSF source...
Malicious code in everything-everywhere-all-at-once-2022-online-free-fullmovies-on-at-home (npm)
--- Credit: OpenSSF source...
Malicious code in event-on-apollo-vortex (npm)
The package event-on-apollo-vortex was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in eris-writable-docusaurus-on (npm)
Source: amazon-inspector 722d4d900728b73a74cce7951c7c4f7bf6d25c2474c3ebdb2614383d6b187cfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
ESPHome Device Builder Dashboard: Unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces
SummaryOn the Home Assistant add-on, the dashboard serves a trusted ingress site that skips authentication because the supervisor authenticates the request upstream. That site was binding 0.0.0.0. The add-on runs in host network mode for mDNS, so binding all interfaces also bound the host's LAN...
NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
SummaryXMLCorpusView.readxmlfragment reads a corpus file in 1 KiB blocks, appendingeach block to a growing fragment string, then calls VALIDXMLRE.matchfragmenton the full accumulated buffer every iteration. Because each iteration rescans theentire accumulated fragment, the total amount of work...