40745 matches found
CVE-2025-1218: Heap-based Buffer Overflow
The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromised MySQL server can send a truncated packet and make the client read past the end of the packet buffer, which is undefined behaviour and c...
The vulnerability of the Erlang/OTP software platform, related to the choice of a less secure algorithm during reconciliation processes, allows attackers to execute a type of “man-in-the-middle” attack.
The vulnerability of the Erlang/OTP software platform is related to the choice of a less secure algorithm during the negotiation process. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...
PT-2026-98820
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ppp async component where the process input packet function incorrectly resets a reused socket buffer skb headroom to zero during a frame-error path. This violates...
CVE-2026-93289
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...
CVE-2026-93289 OS command injection in Eufy Omni C20, Omni X10 Pro
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...
EUVD-2026-86410
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...
CVE-2026-93289 OS command injection in Eufy Omni C20, Omni X10 Pro
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...
CVE-2026-93289
The Eufy Omni C20 and Omni X10 Pro are vulnerable to an OS command injection attack. This vulnerability allows an unauthenticated attacker to execute arbitrary system commands during the pairing process . While the specific root cause is not detailed in the provided documents, the impact is signi...
CVE-2026-97422
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...
CVE-2026-94613
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in either the identity-provider or SAML source role. The message can stop the worker handling...
CVE-2026-88355
An incorrect buffer size calculation vulnerability exists in tinyexpr commit 4a7456e in newexpr. For arity-0 expression nodes, including constants, variables, and zero-argument functions, the function allocates less memory than sizeofteexpr but treats the returned allocation as a complete teexpr...
UBUNTU-CVE-2026-93253
In the Linux kernel, the following vulnerability has been resolved: sched/isolation: Defer freeing of cpumask memblock memory to initcall When testing a linux-next kernel with commit 59bd1d914bb5 "memblock: warn when freeing reserved memory before memory map is initialized", the following warning...
CVE-2026-94613
The authentik identity provider is vulnerable to a Denial of Service (DoS) attack via malformed SAML messages. An unauthenticated attacker can submit a message containing specific Document Type Declarations that cause the worker process handling /application/saml/* or /source/saml/* to stop. This...
EUVD-2026-86122
authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated attacker can submit a malformed SAML message to an authentik deployment using SAML in either the identity-provider or SAML source role. The message can stop the worker handling...
CVE-2026-97422
A vulnerability in the Linux kernel 's drm/amdkfd component allows a cross-process information leak regarding SMI events. The issue arises because the kfd_smi_ev_enabled() function skips user privilege checks when pid=0. Consequently, PROCESS_START , PROCESS_END , and VMFAULT events are emitted w...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in the Actor component of Google Chrome prior to version 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policies through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
In ANGLE, an uninitialized resource in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside of the sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Using use after free in Web Packaging in Google Chrome before version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and utilized social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Low...