17841 matches found
Appsmith security vulnerabilities
Appsmith is an open-source platform developed by Appsmith itself, used for building, deploying, and maintaining internal applications. Versions of Appsmith prior to 1.94 contained security vulnerabilities. These vulnerabilities allowed unauthenticated users to perform unpublished operations, whic...
Azure Linux 3.0 Security Update: kernel (CVE-2024-57933)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57933 advisory. - In the Linux kernel, the following vulnerability has been resolved: gve: guard XSK operations on the existen...
OSV-2026-94 Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476574781 Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.statement java.base/jdk.internal.misc.Unsafe.weakCompareAndSetInt...
Cybersecurity Predictions for 2026 Signal the Maturation of Risk-First Security Models
Key Takeaways Cyber risk management gets operationalized in 2026. Leading organizations move beyond visibility and frameworks to govern risk through prioritization, simulation, and deliberate action. Attack-path modeling matures into execution. Static views give way to dynamic, decision-driving...
open-vm-tools: Insecure file handling
A vulnerability was found in open-vm-tools. A malicious actor with non-administrative privileges on a guest virtual machine VM may tamper with the local files to trigger insecure file operations within that VM...
security-antipatterns-java
Security Anti-Patterns for Java AI coding agents write insecu...
MiracleLinux 9 : pcp-6.2.0-5.el9_4 (AXSA:2024-8828:05)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8828:05 advisory. pcp: pmpost symlink attack allows escalating pcp to root user CVE-2024-45770 pcp: pmcd heap corruption through metric pmstore operations...
ROS-20260120-7349
A vulnerability in the drivers/net/ethernet/broadcom/bnxt component of the Linux kernel is related to duplicate operations on a resource. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Flexense Syncbreeze
No d...
CVE-2026-1144
A flaw was found in quickjs-ng. A remote attacker could exploit a use-after-free vulnerability within the Atomics Ops Handler component, specifically in the quickjs.c file. This manipulation could lead to arbitrary code execution, information disclosure, or a denial of service. The exploit for th...
UBUNTU-CVE-2026-1144
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is...
CVE-2026-1144 quickjs-ng quickjs Atomics Ops quickjs.c use after free
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is...
CVE-2026-1144
A vulnerability was detected in quickjs-ng quickjs up to 0.11.0. Affected is an unknown function of the file quickjs.c of the component Atomics Ops Handler. The manipulation results in use after free. The attack can be executed remotely. The exploit is now public and may be used. The patch is...
kernel: libceph: fix potential use-after-free in have_mon_and_osd_map()
A use-after-free vulnerability was found in the Ceph client session initialization in the Linux kernel. The havemonandosdmap function checks map epochs without holding the appropriate locks, racing with concurrent map updates that free the old map. This can result in dereferencing freed memory...
PT-2026-3502
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.55.0 Description File Browser provides a file managing interface for tasks like uploading, deleting, and editing files. A flaw in the JSONAuth.Auth function allows unauthenticated attackers to identify valid...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001217)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001217 advisory. kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service memory corruption or possibly have unspecified other impact ...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000833)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000833 advisory. The xeniret function in arch/x86/xen/xen-asm32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirtops platforms does not properly handle an invalid value in th...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001392)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001392 advisory. An issue was discovered in the Linux kernel through 4.18.8. The vmacacheflushall function in mm/vmacache.c mishandles sequence number overflows. An attacker can...
The vulnerability of the Adobe InCopy text creation and editing software lies in the occurrence of out-of-buffer operations in memory, which allows an attacker to execute arbitrary code.
The vulnerability of the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...