15949 matches found
security-antipatterns-java
Security Anti-Patterns for Java AI coding agents write insecu...
MiracleLinux 9 : pcp-6.2.0-5.el9_4 (AXSA:2024-8828:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8828:05 advisory. pcp: pmpost symlink attack allows escalating pcp to root user CVE-2024-45770 pcp: pmcd heap corruption through metric pmstore operations...
ROS-20260120-7349
A vulnerability in the drivers/net/ethernet/broadcom/bnxt component of the Linux kernel is related to duplicate operations on a resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Flexense Syncbreeze
No d...
CVE-2026-1144
A flaw was found in quickjs-ng. A remote attacker could exploit a use-after-free vulnerability within the Atomics Ops Handler component, specifically in the quickjs.c file. This manipulation could lead to arbitrary code execution, information disclosure, or a denial of service. The exploit for th...
UBUNTU-CVE-2026-1144
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is...
CVE-2026-1144 quickjs-ng quickjs Atomics Ops quickjs.c use after free
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is...
CVE-2026-1144
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is...
kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()
A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...
PT-2026-3502
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.55.0 Description File Browser provides a file managing interface for tasks like uploading, deleting, and editing files. A flaw in the JSONAuth.Auth function allows unauthenticated attackers to identify valid...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001520)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001520 advisory. It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001217)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001217 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000833)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000833 advisory. The xeniret function in arch/x86/xen/xen-asm32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirtops platforms does not properly handle an invalid value in th...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001392)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001392 advisory. An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000873)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000873 advisory. Multiple race conditions in ipc/shm.c in the Linux kernel before 3.12.2 allow local users to cause a denial of service use-after-free and system crash or possibly ha...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003951)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003951 advisory. A memory leak in the ccprunshacmd function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service memory...
CVE-2026-22909
Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations...
