60030 matches found
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Staging: vchiqarm: Avoid dereferencing a NULL pointer in vchiqdumpplatforminstances. vchiqgetstate may return a NULL pointer. Therefore, handle this case and avoid dereferencing a NULL pointer in vchiqdumpplatforminstances...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: The calltrace warning in amddrmbuddyfini has been fixed. The following call trace was observed when the amdgpu driver was removed. This issue arises because the BOs allocated for psp are not freed until the driver is...
CVE-2026-76172
creationtimestamp| type| source ---|---|--- 2026-08-24 10:11:24+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2uomns22b 2026-09-02 19:33:12+00:00| seen| https://gist.github.com/alon710/af575107e879f298d568b88dd8bac4cb...
firefox: thunderbird: Mitigation bypass in the Storage: Cache API component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Storage: Cache API component...
firefox: thunderbird: Use-after-free in the JavaScript: WebAssembly component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript: WebAssembly component...
ServiceNow UI Macros - Template Injection
ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. ServiceNow applied an update to hosted...
AndroSH v26.08.23
AndroSH - Run Linux Distributions on Android No Root, ADB/Shizuku Powered Run and manage full Linux distributions on your Android device - no root required. Table of Contents Quick Start Features Supported Distributions Overview Screenshots Architecture Installation Updating Usage Use Cases...
API
ShopEase API Security Shooting Range A carefully designed A...
CVE-2026-78161
A vulnerability was found in warmcat libwebsockets 4.5.0. Impacted is the function reportrawcbor of the file lib/misc/lecp.c of the component LECP CBOR Recording. The manipulation results in out-of-bounds write. The attack can be launched remotely. The exploit has been made public and could be...
ROS-20260824-73-0002
The vulnerability in the incus is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20260824-73-0023
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
Grafana Access Control Privilege Escalation
The vulnerability of the Grafana monitoring and observation platform, related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Microsoft Entra ID Deserialization Code Execution
The vulnerability of the cloud-based platform for managing and protecting Microsoft Entra ID formerly Azure Active Directory is related to deficiencies in deserialization mechanisms. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
RHEL 10 / 9 : Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update (Important) (RHSA-2026:59137)
The remote Redhat Enterprise Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59137 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...
CVE-2026-76905 vulnerabilities
Vulnerabilities for packages: commercial-grafana, grafana-fips, grafana...
GHSA-QMCG-GF85-VJV7 vulnerabilities
Vulnerabilities for packages: firefox-esr...
CVE-2026-41721 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
CVE-2026-41711 vulnerabilities
Vulnerabilities for packages: camunda-zeebe...
CVE-2026-62243
Netty io.netty:netty-handler versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client path when a plain non-extended X509TrustManager is used and Unsafe-based trust-manager wrapping is unavailable Java 25...