49866 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: dm cache: fix out-of-bounds access to the dirty bitset when resizing dm-cache checks the dirty bits of the cache blocks to be dropped when shrinking the fast device, but an index bug in bitset iteration causes out-of-bounds acces...
Astra Linux – Vulnerability in Tomcat9
An incorrect authorization vulnerability in Apache Tomcat’s FORM authentication process allows for bypassing a security constraint that restricts users’ access to resources via POST requests, but not via GET requests. This issue affects Apache Tomcat versions from 11.0.0-M1 through 11.0.24, from...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerability has been resolved: kprobes: The posthandler of aggrprobe is cleared in the case where kprobe-on-ftrace is used. In unregisterkprobetop, if the currently unregistered probe has a posthandler, but other child probes of aggrprobe do not have a...
CVE-2026-89099
creationtimestamp| type| source ---|---|--- 2026-09-14 12:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvi3ca5sl224 2026-09-14 14:00:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvibhel47j2u...
Astra Linux – Vulnerability in Firefox
When a user opened the Web Extensions context menu, the Web Extension could access the post-redirect URL of the clicked element. If the Web Extension did not have the necessary WebRequest permissions for the hosts involved in the redirection, this would constitute a same-origin violation, allowin...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix OOB Read in qrtrendpointpost Syzbot reported a slab-out-of-bounds Read in qrtrendpointpost. The problem was with the wrong sizetype: if len != ALIGNsize, 4 + hdrlen goto err; If the size from qrtrhdr is 4294967293...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: sched/fair: Fixed an error in reweightentity. Syzbot detected a GPF in reweightentity. This issue has been fixed in commit 4ef0c5c6b5ba “kernel/sched: Fixed the issue where schedfork accesses an invalid schedtaskgroup”. There ...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: scsi: Message: mptlan: Fixed a use-after-free bug in mptlanremove, due to a race condition. In mptlanprobe, mptregisterlandevice is called, which initializes the &priv-postbucketstask workqueue. A call to...
Astra Linux – Vulnerability in etcd
A cross-site request forgery flaw was discovered in etcd 3.3.1 and earlier. An attacker can create a website that attempts to send a POST request to the etcd server and modify a key. Adding a key is done using a PUT operation, so it seems theoretically safe but PUT operations cannot be performed...
Astra Linux – Vulnerability in libmicrohttpd
GNU libmicrohttpd before version 0.9.76 allowed remote Denial of Service attacks due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHDcreatepostprocessor method. This allowed attackers to remotely send a malicious HTTP POST packet that included one or more '\0' byte...
Astra Linux – Vulnerability in curl
When performing HTTPS transfers, libcurl may incorrectly use the read callback CURLOPTREADFUNCTION to request data to be sent, even when the CURLOPTPOSTFIELDS option has been set. This occurs if the same handle was previously used to issue a PUT request that utilized that callback. This flaw may...
Astra Linux – Vulnerability in Python-Django
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. Permissions for inline model instances were not validated when submitting forged POST data in GenericInlineModelAdmin. Earlier, unsupported Django versions such as 5.0.x, 4.1.x, and 3.2.x were not evaluated and...
CVE-2026-90895
creationtimestamp| type| source ---|---|--- 2026-09-14 10:35:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gnucz5ojyf4fj...
WordPress MDJM Event Management plugin < 1.7.8.5 - Unauthenticated Arbitrary Post Deletion vulnerability
Unauthenticated Arbitrary Post Deletion vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile DJ Manager versions 1.7.8.5...
CVE-2026-90692
creationtimestamp| type| source ---|---|--- 2026-09-14 08:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhndce6h72w 2026-09-14 08:07:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvhnq6sty52f...
CVE-2026-89711
creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhjzafa762p 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-89709
creationtimestamp| type| source ---|---|--- 2026-09-14 07:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhjyyvchj23...
CVE-2026-90618
creationtimestamp| type| source ---|---|--- 2026-09-14 04:18:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/e5xqgx62uyt2x...