52051 matches found
CVE-2026-43311 soc/tegra: pmc: Fix unsafe generic_handle_irq() call
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix unsafe generichandleirq call Currently, when resuming from system suspend on Tegra platforms, the following warning is observed: WARNING: CPU: 0 PID: 14459 at kernel/irq/irqdesc.c:666 Call trace:...
CVE-2026-43311 soc/tegra: pmc: Fix unsafe generic_handle_irq() call
In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix unsafe generichandleirq call Currently, when resuming from system suspend on Tegra platforms, the following warning is observed: WARNING: CPU: 0 PID: 14459 at kernel/irq/irqdesc.c:666 Call trace:...
CVE-2026-43310 media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produ...
CVE-2026-43310 media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC For the i.MX8MQ platform, there is a hardware limitation: the g1 VPU and g2 VPU cannot decode simultaneously; otherwise, it will cause below bus error and produ...
CVE-2026-43286
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore failed global reservations to subpool Commit a833a693a490 "mm: hugetlb: fix incorrect fallback for subpool" fixed an underflow error for hstate-resvhugepages caused by incorrectly attributing globally requeste...
CVE-2026-41423
Summary: CVE-2026-41423 corresponds to an SSRF vulnerability in @angular/platform-server during SSR, where URL handling can cause the server to treat the attacker’s domain as the local origin. This occurs when a crafted request (e.g., GET /evil.com/ HTTP/1.1) is passed to Angular’s rendering func...
CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...
CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...
CVE-2026-41423 Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...
CVE-2026-41161 Username Enumeration via Timing Attack
Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.2.0, the /api/auth/login endpoint contains a logic flaw that allows unauthenticated remote attackers to enumerate valid usernames by measuring the application's response time...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.89 bug fix and security update
Red Hat OpenShift Container Platform release 4.12.89 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...
CVE-2026-34354: Guardicore Local Privilege Escalation Vulnerability
Read the technical details of a security vulnerability CVE-2026-34354 in Akamai Guardicore Platform Agent for Windows — and get clear guidance on mitigation...
GHSA-MJ4R-2HFC-F8P6 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, docker-selenium, apache-nifi-registry, neo4j, kserve-modelmesh, cassandra, wavefront-proxy, apache-nifi, zipkin, trino, apache-activemq-artemis, keycloak, celeborn, zookeeper, spark, akhq, thingsboard, sonarqube, logstash...
GHSA-Q2QQ-HMJ6-3WPP vulnerabilities
Vulnerabilities for packages: linkerd2-proxy, shadowsocks-rust, ztunnel, deno, vector...
GHSA-M4CV-J2PX-7723 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, tez, docker-selenium, apache-nifi-registry, neo4j, kserve-modelmesh, wavefront-proxy, apache-nifi, zipkin, trino, apache-activemq-artemis, keycloak, celeborn, spark, akhq, thingsboard, sonarqube, logstash, selenium, infinispan...
GHSA-HF2P-G3JQ-W2MX vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-gcp, linux-qemu, linux-azure...
CVE-2026-31696 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu-rc, linux-gcp, linux-qemu, linux-azure...
GHSA-P5WW-JRFV-82QX vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware, linux-qemu-rc, linux-gcp, linux-qemu, linux-azure...